Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Cloud Pak For Data
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-26026 1 Ibm 1 Cloud Pak For Data 2023-07-28 N/A 7.5 HIGH
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
CVE-2023-27877 1 Ibm 1 Cloud Pak For Data 2023-07-28 N/A 7.5 HIGH
IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.
CVE-2023-26023 1 Ibm 1 Cloud Pak For Data 2023-07-28 N/A 7.5 HIGH
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
CVE-2021-38899 1 Ibm 1 Cloud Pak For Data 2021-09-28 2.1 LOW 4.4 MEDIUM
IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575.
CVE-2021-20486 3 Ibm, Linux, Redhat 3 Cloud Pak For Data, Linux Kernel, Enterprise Linux 2021-06-02 4.0 MEDIUM 6.5 MEDIUM
IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668.