CVE WATCH / VULNERABILITY DETAIL
CVE-2023-38375
MEDIUMCVSS 6.1NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110674
- CVE-2026-110676
- CVE-2026-109434 MEDIUM 4.3
- CVE-2026-55644
- CVE-2026-3303 LOW 3.7
- CVE-2026-4413 MEDIUM 6.1
- CVE-2026-11319 MEDIUM 6.2
- CVE-2026-111755
- CVE-2026-111759 HIGH 7.5
- CVE-2026-107084