Cloud Pak For Applications

cloud_pak_for_applications

Vendor: Ibm • 12 CVEs

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-20424 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks again...Show more IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. X-Force ID: 196309.Show less
CVE-2021-20423 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions. IBM X-Force ID: 196308.
CVE-2021-20422 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory. IBM X-Force ID: 196304.
CVE-2021-20369 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361.
CVE-2021-20368 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195357.Show less
CVE-2021-20366 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195037.Show less
CVE-2021-20365 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195036.Show less
CVE-2021-20364 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195035.Show less
CVE-2021-20363 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034.Show less
CVE-2021-20362 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195033.Show less
CVE-2021-20361 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195032.Show less
CVE-2021-20360 1Ibm 1Cloud Pak For Applications Nov 21, 2024 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031.