Cloud Pak For Automation (Ibm) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2024-03-21. Vendor: Ibm.
CVEs of Cloud Pak For Automation
- CVE-2023-35899 - CVSS 9.8 (critical), 2024-03-21: IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially…
- CVE-2023-38367 - CVSS 6.5 (medium), 2024-02-29: IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2,…
- CVE-2021-29872 - CVSS 5.4 (medium), 2022-01-18: IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of…
- CVE-2021-38900 - CVSS 6.5 (medium), 2021-12-21: IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly…
- CVE-2021-38893 - CVSS 6.4 (medium), 2021-12-21: IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This…
- CVE-2021-38966 - CVSS 5.4 (medium), 2021-12-21: IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
- CVE-2021-29751 - CVSS 4.3 (medium), 2021-06-28: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive…
- CVE-2021-29775 - CVSS 6.4 (medium), 2021-06-28: IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This…
- CVE-2021-20482 - CVSS 7.1 (high), 2021-03-30: IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote…
- CVE-2021-20359 - CVSS 6.5 (medium), 2021-02-08: IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files…
- CVE-2021-20358 - CVSS 6.5 (medium), 2021-02-08: IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could…
- CVE-2020-4325 - CVSS 6.5 (medium), 2020-04-02: The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that…
