Cloud Pak For Data
Vendor:
First CVE: May 26, 2021 · Active for 5 years
15
Total CVEs
More Total CVEs than 92% of tracked products
2.5
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 32% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Cloud Pak For Data over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 26, 2021
5 years ago
Most Recent CVE
Jun 22, 2026
33 days ago
CVE Severity & Scoring
Cloud Pak For Data15 CVEs
60%
40%
All CVEs352,427 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local2 (13.3%)
Network13 (86.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (93.3%)
High1 (6.7%)
Unknown0 (0.0%)
User Interaction
None14 (93.3%)
Unknown0 (0.0%)
Required1 (6.7%)
Privileges Required
Low6 (40.0%)
High4 (26.7%)
None5 (33.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-54178MEDIUM IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new | Jun 22, 2026 | 6.5 | 28 | NO | NO |
CVE-2025-2669MEDIUM IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive info | Jun 22, 2026 | 6.5 | 27 | NO | NO |
CVE-2023-42005HIGH IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls co | May 29, 2024 | 8.8 | 24 | NO | NO |
CVE-2023-33854MEDIUM IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and ma | Jun 22, 2026 | 5.3 | 23 | NO | NO |
CVE-2023-27877HIGH IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sens | Jul 19, 2023 | 7.5 | 23 | NO | NO |
CVE-2023-26026HIGH Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. | Jul 19, 2023 | 7.5 | 23 | NO | NO |
CVE-2022-36769HIGH
IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. | Apr 26, 2023 | 7.2 | 23 | NO | NO |
CVE-2021-20486MEDIUM IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668. | May 26, 2021 | 6.5 | 22 | NO | NO |
CVE-2023-27540HIGH IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information specific to the system to c | Jul 10, 2023 | 7.5 | 21 | NO | NO |
CVE-2022-22353MEDIUM IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing dat | Mar 14, 2022 | 6.5 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For Cloud Pak For Data
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.0 | 1 | 6.1 | 0.3% | 0 | 0 |
| 4.6.0 | 2 | 6.5 | 0.8% | 0 | 0 |
| 4.6 | 1 | 7.2 | 0.9% | 0 | 0 |
| 4.5 | 1 | 7.2 | 0.9% | 0 | 0 |
| 4.0 | 3 | 7.5 | 0.6% | 0 | 0 |
| 3.0 | 1 | 6.5 | 0.9% | 0 | 0 |
| 2.5 | 1 | 4.4 | 0.3% | 0 | 0 |