Cross-Site Scripting Vulnerability in IBM Cloud Pak System
CVE-2023-38017

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Cloud Pak System
Os Image For Red Hat Linux Systems
Vendor
CVE Published:
4 February 2026

What is CVE-2023-38017?

IBM Cloud Pak System is susceptible to a cross-site scripting vulnerability that enables attackers to inject arbitrary JavaScript code into the Web UI. This compromise could lead to unauthorized actions and the potential exposure of sensitive information, including user credentials, within a trusted session. Organizations utilizing IBM Cloud Pak System are advised to apply security patches and monitor their systems to mitigate the risks associated with this flaw.

Affected Version(s)

Cloud Pak System 2.3.4.0

Cloud Pak System 2.3.4.1

Cloud Pak System 2.3.4.1 Interim Fix 001

References

https://www.ibm.com/support/pages/node/7254419
vendor-advisorypatch

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.