Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-3684 (GCVE-0-2026-3684)

Vulnerability from cvelistv5 – Published: 2026-11-08 18:32 – Updated: 2026-11-09 21:10

Title

Vulnerabilities exists in IBM Cloud Pak for Data System

Summary

IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-09 21:08 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

ibm CNA

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7293239	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak for Data System	Affected: 11.3.1.2 Interim Fix 001 , ≤ 11.3.1.2 Interim Fix 002 (semver) cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.1.2:interim_fix_001:::::: cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.1.2:interim_fix_002::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3684",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-09T21:08:23.978879Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-09T21:10:02.059Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.1.2:interim_fix_001:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.1.2:interim_fix_002:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak for Data System",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "11.3.1.2 Interim Fix 002",
              "status": "affected",
              "version": "11.3.1.2 Interim Fix 001",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001\u0026nbsp;through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001\u00a0through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266 Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-08T18:32:19.762Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7293239"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eFixed Version\u003c/td\u003e\u003ctd\u003e\u003cp\u003eRemediation/Fixes\u00a0\u200b\u200c\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Cloud Pak for Data System (Yosemite 1.0)\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FWebSphere%2FIBM+Cloud+Private+for+Data+System\u0026amp;fixids=11.3.1.2-IF3-WS-ICPDS-1x-NPS-fp367344\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=ibm/WebSphere\" rel=\"nofollow\"\u003e11.3.1.2-IF3-WS-ICPDS-1x-NPS-fp367344\u0026amp;\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "IBM strongly encourages customers to update their systems promptly.\n\nFixed Version\n\nRemediation/Fixes\u00a0\u200b\u200c\n\n\n\n\n\nIBM Cloud Pak for Data System (Yosemite 1.0) 11.3.1.2-IF3-WS-ICPDS-1x-NPS-fp367344\u0026 https://www.ibm.com/support/fixcentral/swg/selectFixes"
        }
      ],
      "title": "Vulnerabilities exists in IBM Cloud Pak for Data System"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-3684",
    "datePublished": "2026-11-08T18:32:19.762Z",
    "dateReserved": "2026-03-06T21:54:25.661Z",
    "dateUpdated": "2026-11-09T21:10:02.059Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-14350 (GCVE-0-2026-14350)

Vulnerability from cvelistv5 – Published: 2026-09-04 16:44 – Updated: 2026-09-04 17:26

Title

Vulnerabilities exists in IBM Cloud Pak for Data System

Summary

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-04 17:26 UTC

CWE

CWE-117 - Improper Output Neutralization for Logs

Assigner

ibm CNA

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7286036	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak for Data System	Affected: 11.3.0.2 , ≤ Interim Fix 001 (semver) cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.0.2:::::::* cpe:2.3:a:ibm:cloud_pak_for_data_system:interim:interim_fix_001::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-14350",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-04T17:26:41.510422Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-04T17:26:52.430Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_for_data_system:interim:interim_fix_001:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak for Data System",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "Interim Fix 001",
              "status": "affected",
              "version": "11.3.0.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-117",
              "description": "CWE-117 Improper Output Neutralization for Logs",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-04T16:44:30.963Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7286036"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eFix Version\u003c/td\u003e\u003ctd\u003eRemediation/Fixes\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Cloud Pak for Data System\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FIBM+Cloud+Private+for+Data+System\u0026amp;fixids=11.3.1.2-IF1-WS-ICPDS-NPS-Clients-fp326919\u0026amp;source=SAR\" rel=\"nofollow\"\u003e11.3.1.2-IF1-WS-ICPDS-NPS-Clients-fp326919\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "Fix VersionRemediation/FixesIBM Cloud Pak for Data System 11.3.1.2-IF1-WS-ICPDS-NPS-Clients-fp326919 https://www.ibm.com/support/fixcentral/quickorder"
        }
      ],
      "title": "Vulnerabilities exists in IBM Cloud Pak for Data System"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-14350",
    "datePublished": "2026-09-04T16:44:30.963Z",
    "dateReserved": "2026-07-01T16:32:59.757Z",
    "dateUpdated": "2026-09-04T17:26:52.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3686 (GCVE-0-2026-3686)

Vulnerability from cvelistv5 – Published: 2026-08-28 20:54 – Updated: 2026-08-31 18:42

Title

Vulnerabilities exists in IBM Cloud Pak for Data System

Summary

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources.

Severity

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-31 18:41 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

ibm CNA

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7285507	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak for Data System	Affected: 11.3.0.2 , ≤ Interim Fix 001 (semver) cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.0.2:::::::* cpe:2.3:a:ibm:cloud_pak_for_data_system:interim:interim_fix_001::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3686",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-31T18:41:50.327434Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-31T18:42:09.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_for_data_system:11.3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_for_data_system:interim:interim_fix_001:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak for Data System",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "Interim Fix 001",
              "status": "affected",
              "version": "11.3.0.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-28T20:54:02.208Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7285507"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eFix Version\u003c/td\u003e\u003ctd\u003e\u003cp\u003eRemediation/Fixes\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Cloud Pak for Data System\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FIBM+Cloud+Private+for+Data+System\u0026amp;fixids=11.3.1.2-IF1-WS-ICPDS-NPS-Clients-fp326919\u0026amp;source=SAR\" rel=\"nofollow\"\u003e11.3.1.2-IF1-WS-ICPDS-NPS-Clients-fp326919\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "Fix Version\n\nRemediation/Fixes\n\nIBM Cloud Pak for Data System 11.3.1.2-IF1-WS-ICPDS-NPS-Clients-fp326919 https://www.ibm.com/support/fixcentral/quickorder"
        }
      ],
      "title": "Vulnerabilities exists in IBM Cloud Pak for Data System"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-3686",
    "datePublished": "2026-08-28T20:54:02.208Z",
    "dateReserved": "2026-03-06T22:12:51.971Z",
    "dateUpdated": "2026-08-31T18:42:09.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

3 vulnerabilities found for Cloud Pak for Data System by IBM

CVE-2026-3684 (GCVE-0-2026-3684)

CVE-2026-14350 (GCVE-0-2026-14350)

CVE-2026-3686 (GCVE-0-2026-3686)