IBM Cloud Pak For Data System - Cyclops vulnerabilities

2 CVEs affecting IBM Cloud Pak For Data System - Cyclops, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36221, published 2026-05-26.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-36220, published 2026-05-26. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements,…
• CVE-2025-36221, published 2026-05-26. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the…