Vulnerabilities

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection.

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

5.4

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-4418 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 15
   CVE NVD 26d ago

   IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting.

   CVSS 7.4 CVE-2026-3295 Oracle
2. 8
   CVE NVD 26d ago

   IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting.

   CVSS 6.1 CVE-2023-38375 Oracle