Ibm Cloud Pak For Applications — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Cloud Pak For Applications, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2021-20423 — CVSS 8.8 (high): IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions…
• CVE-2021-20360 — CVSS 7.5 (high): IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
• CVE-2021-20422 — CVSS 7.5 (high): IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory. IBM…
• CVE-2021-20369 — CVSS 5.9 (medium): IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
• CVE-2021-20364 — CVSS 5.4 (medium): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2021-20365 — CVSS 5.4 (medium): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2021-20368 — CVSS 5.4 (medium): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2021-20366 — CVSS 5.4 (medium): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2021-20361 — CVSS 5.4 (medium): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2021-20362 — CVSS 5.4 (medium): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2021-20363 — CVSS 5.4 (medium): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2021-20424 — CVSS 4.3 (medium): IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is…