{"id":"CVE-2026-3295","kind":"vulnerability","aliases":["CVE-2026-3295"],"related":[],"title":"IBM Cloud Pak System: stored XSS lets an authenticated user run scripts","description":"IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing malicious JavaScript which are saved within the app and later executed automatically when user views affected pages, resulting in Stored Cross‑Site Scripting (Stored XSS).","summary":"IBM Cloud Pak System 2.3.6.0 and 2.3.6.1 do not sanitize or encode user input before storing and rendering it in the web app. An authenticated attacker can save JavaScript that runs in the browser of anyone who later views the affected page.","severity":"high","cvss":7.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-cloud-pak-system","infrastructure","self-hosted","web-ui"],"not_affected_if":["auth-required"],"how_to_check":"- Check the installed Cloud Pak System version in the appliance console; unknown if the sources give a command.\n- Confirm whether the affected version is `2.3.6.0` or `2.3.6.1`.","fix":"- Move to a fixed Cloud Pak System release; unknown, the sources do not name the fixed version.\n- Check the IBM security bulletin for the fix; unknown if the sources give a link.","status":"open","published_at":"2026-10-19T18:17:07+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","triaged_at":"2026-10-25T03:27:11+00:00","updated_at":"2026-10-25T03:27:11+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T03:27:11Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a fixed Cloud Pak System release; unknown, the sources do not name the fixed version.\n- Check the IBM security bulletin for the fix; unknown if the sources give a link.","reach":"network","title":"IBM Cloud Pak System: stored XSS lets an authenticated user run scripts","impact":"medium","summary":"IBM Cloud Pak System 2.3.6.0 and 2.3.6.1 do not sanitize or encode user input before storing and rendering it in the web app. An authenticated attacker can save JavaScript that runs in the browser of anyone who later views the affected page.","category":"infrastructure","nicknames":[],"who_cares":["ibm-cloud-pak-system","self-hosted","web-ui"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker's script runs in other users' browsers within the appliance console","analyst_note":"Find the IBM security bulletin for CVE-2026-3295 to confirm the fixed version and the affected pages.","how_to_check":"- Check the installed Cloud Pak System version in the appliance console; unknown if the sources give a command.\n- Confirm whether the affected version is `2.3.6.0` or `2.3.6.1`.","needs_analyst":true,"not_affected_if":["auth-required"],"who_is_affected":"Deployments of IBM Cloud Pak System 2.3.6.0 and 2.3.6.1 where users can enter data that is stored and shown in the web interface. Exposure depends on who holds accounts on the appliance, since the attacker must be authenticated. Installations on other versions are not listed as affected.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000638,"input_tokens":3389,"output_tokens":598,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-3295':15A,18A '2.3.6.0':35B,77C '2.3.6.1':37B,79C 'affect':71B,132C 'anyon':66B 'app':53B,88C,124C 'attack':56B,106C 'authent':9A,55B,105C 'automat':128C 'browser':64B 'cloud':2A,21B,32B,74C 'contain':116C 'could':107C 'craft':114C 'cross':83C,137C 'cve':13A,16A 'encod':42B,98C 'enter':112C 'execut':127C 'exploit':108C 'host':27B 'html':97C 'ibm':1A,20B,31B,73C 'ibm-cloud-pak-system':19B 'infrastructur':24B 'input':44B,91C 'javascript':59B,118C 'later':68B,126C 'let':7A 'malici':117C 'page':72B,133C 'pak':3A,22B,33B,75C 'payload':115C 'proper':94C 'render':48B,103C 'result':134C 'run':11A,61B 'sanit':40B,95C 'save':58B,121C 'script':12A,85C,139C 'self':26B 'self-host':25B 'site':84C,138C 'special':113C 'store':5A,46B,101C,136C,140C 'suppli':90C 'system':4A,23B,34B,76C 'ui':30B 'user':10A,43B,89C,130C 'view':69B,131C 'vulner':81C,110C 'web':29B,52B,87C 'web-ui':28B 'within':122C 'xss':6A,141C","nicknames":[],"mitigations":[],"who_affected":"Deployments of IBM Cloud Pak System 2.3.6.0 and 2.3.6.1 where users can enter data that is stored and shown in the web interface. Exposure depends on who holds accounts on the appliance, since the attacker must be authenticated. Installations on other versions are not listed as affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T18:17:07+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-3295","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3295","severity":null,"published_at":"2026-10-19T18:17:07+00:00","modified_at":"2026-10-19T20:55:02+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}