CVE-2023-38265

5.3 mediumEPSS 0.2%

Medium (5.3) in ibm cloud pak system. EPSS 0.2% chance of exploitation in the next 30 days.

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-548
Published: 2026-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cloud_pak_system

References

https://www.ibm.com/support/pages/node/7259955

Check your stack JSON