Volerion logoVolerion
Volerion logoVolerion

IBM Cloud Pak System HTML Injection Vulnerability

Vulnerability

A HTML injection vulnerability has been identified in IBM Cloud Pak System versions 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power, as well as 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0 and 2.3.4.1 on Intel operating systems. This vulnerability allows remote attackers to inject malicious HTML code, which would be executed in the context of the victim's web browser, potentially leading to cross-site scripting (XSS) attacks.

Impact

Exploitation of this vulnerability could result in HTML injection, allowing for cross-site scripting (XSS) attacks.

Remediation

Users on Intel operating systems are advised to upgrade to IBM Cloud Pak System v2.3.4.1 Interim Fix 1, available at IBM Fix Central. For Power users, contact IBM Support.

Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM

Vulnerability Rating

Custom Algorithm
spread
1.4
impact
1.0
exploitability
4.6
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.