Dashboard / CVE-2026-3684

CVE-2026-3684

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 58/100
Published: 2026-11-08 Modified: 2026-11-09 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: High
A: None

Description

IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001
IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001

References & Advisories (1)

Bug Bounty Relevance

58 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS — Exploitation Probability

0.29%
Raw Score 0.002890
Percentile 21.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00289
2026-11-12
0.00289
2026-11-10
0.00289
2026-11-09
0.00289

Intelligence Sources

mitre ref →
nvd ref →

External Links