CVSS 6.1 (medium) · published 2026-10-19
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products (NVD): ibm cloud_pak_system
Fixed in (NVD): 2.3.6.2
Weakness: CWE-79
Source: NVD CVE-2023-38375
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.