Cloud Pak For Data (Ibm) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 51 known versions, newest CVE from 2026-09-18. Vendor: Ibm.
CVEs of Cloud Pak For Data
- CVE-2025-14754 - CVSS 8.8 (high), 2026-09-18: IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation…
- CVE-2025-14753 - CVSS 7.5 (high), 2026-09-18: IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request…
- CVE-2025-0719 - CVSS 6.1 (medium), 2025-02-26: IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed…
- CVE-2023-27545 - CVSS 5.5 (medium), 2024-02-29: IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system.…
- CVE-2023-26023 - CVSS 7.5 (high), 2023-07-19: Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to…
- CVE-2023-27877 - CVSS 7.5 (high), 2023-07-19: IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB…
- CVE-2023-26026 - CVSS 7.5 (high), 2023-07-19: Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to…
- CVE-2023-27540 - CVSS 7.5 (high), 2023-07-10: IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information…
- CVE-2022-36769 - CVSS 7.2 (high), 2023-04-26: IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the…
- CVE-2021-38899 - CVSS 4.4 (medium), 2021-09-20: IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575.
- CVE-2021-20486 - CVSS 6.5 (medium), 2021-05-26: IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668.
