# Ibm Cloud Pak for Security


- [CVE-2025-25022](https://insights.sbomify.com/CVE-2025-25022/): IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure (critical 9.6)
- [CVE-2021-29696](https://insights.sbomify.com/CVE-2021-29696/): Command injection in Cloud Pak for Security (high 8.0)
- [CVE-2025-25021](https://insights.sbomify.com/CVE-2025-25021/): IBM QRadar Suite Software and IBM Cloud Pak for Security code injection (high 7.2)
- [CVE-2023-47726](https://insights.sbomify.com/CVE-2023-47726/): IBM QRadar Suite improper input validation (high 7.1)
- [CVE-2022-38385](https://insights.sbomify.com/CVE-2022-38385/): Missing authorization in Cloud Pak for Security (high 7.1)
- [CVE-2022-38387](https://insights.sbomify.com/CVE-2022-38387/): Command injection in Cloud Pak for Security (high 7.1)
- [CVE-2023-30993](https://insights.sbomify.com/CVE-2023-30993/): IBM Cloud Pak for Security information disclosure (medium 6.8)
- [CVE-2025-25020](https://insights.sbomify.com/CVE-2025-25020/): IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation (medium 6.5)
- [CVE-2023-47728](https://insights.sbomify.com/CVE-2023-47728/): IBM QRadar Suite Software information disclosure (medium 6.5)
- [CVE-2020-4627](https://insights.sbomify.com/CVE-2020-4627/): Code injection in Cloud Pak for Security (medium 6.5)
- [CVE-2024-28782](https://insights.sbomify.com/CVE-2024-28782/): IBM QRadar Suite Software information disclosure (medium 6.3)
- [CVE-2020-4820](https://insights.sbomify.com/CVE-2020-4820/): Cross-site scripting in Cloud Pak for Security (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/cloud-pak-for-security/