Veille CVE

Lundi 19 octobre 2026

3 CVE sur 4

Critique 0 Élevée 1 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Cloud Pak System » ✕
  1. CVE-2026-4418 5.4 Moyenne

    IBM Cloud Pak System

    IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

  2. CVE-2026-3161 5.9 Moyenne

    IBM Cloud Pak System

    IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  3. CVE-2023-38375 6.1 Moyenne

    IBM Cloud Pak System

    IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.