Cloud Pak For Business Automation (Ibm) - vulnerabilities (CVEs)

33 CVEs, 0 in the last 30 days, 147 known versions, newest CVE from 2026-09-15. Vendor: Ibm.

CVEs of Cloud Pak For Business Automation

• CVE-2026-11864 - CVSS 6.5 (medium), 2026-09-15: IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and…
• CVE-2026-12749 - CVSS 6.4 (medium), 2026-09-15: IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary…
• CVE-2026-12750 - CVSS 6.4 (medium), 2026-09-15: IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary…
• CVE-2026-12751 - CVSS 5.4 (medium), 2026-09-15: IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be…
• CVE-2026-12758 - CVSS 5.4 (medium), 2026-09-14: IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP…
• CVE-2026-12759 - CVSS 6.5 (medium), 2026-09-14: IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption.
• CVE-2026-81859 - CVSS 6.2 (medium), 2026-09-04: CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm.
• CVE-2026-12762 - CVSS 5.3 (medium), 2026-08-05: IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest…
• CVE-2025-36094 - CVSS 8.1 (high), 2026-02-03: IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007…
• CVE-2025-36436 - CVSS 6.4 (medium), 2026-02-02: IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 …
• CVE-2025-36172 - CVSS 6.4 (medium), 2025-11-03: IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 001, 24.0.1 through 24.0.1 Interim Fix 004, 24.0.0 through 24.0.0 Interim Fix 006, and…
• CVE-2025-36093 - CVSS 7.4 (high), 2025-11-03: IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized content or perform unauthorized actions using…
• CVE-2025-36092 - CVSS 6.5 (medium), 2025-11-03: IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation…
• CVE-2025-36091 - CVSS 4.3 (medium), 2025-11-03: IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate…
• CVE-2025-36023 - CVSS 6.5 (medium), 2025-08-08: IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and…
• CVE-2025-1838 - CVSS 6.5 (medium), 2025-05-03: IBM Cloud Pak for Business Automation 24.0.0 and 24.0.1 through 24.0.1 IF001 Authoring allows an authenticated user to bypass client-side data validation in…
• CVE-2025-1495 - CVSS 4.3 (medium), 2025-05-03: IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation.
• CVE-2024-41753 - CVSS 6.1 (medium), 2025-05-03: IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF004 and 24.0.1 through 24.0.1 IF001 is vulnerable to cross-site scripting. This vulnerability…
• CVE-2024-52365 - CVSS 6.4 (medium), 2025-02-05: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is…
• CVE-2024-52364 - CVSS 5.4 (medium), 2025-02-05: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is…
• CVE-2024-49348 - CVSS 6.5 (medium), 2025-02-05: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2…
• CVE-2024-37528 - CVSS 5.4 (medium), 2024-07-08: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1,…
• CVE-2024-31897 - CVSS 4.3 (medium), 2024-07-08: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1,…
• CVE-2023-50959 - CVSS 6.5 (medium), 2024-03-31: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1,2 2.0.2, 23.0.1,…
• CVE-2023-35899 - CVSS 9.8 (critical), 2024-03-21: IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially…
• CVE-2023-38367 - CVSS 6.5 (medium), 2024-02-29: IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2,…
• CVE-2023-50947 - CVSS 5.4 (medium), 2024-02-04: IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
• CVE-2023-40691 - CVSS 4.9 (medium), 2023-12-18: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may…
• CVE-2023-35024 - CVSS 7.6 (high), 2023-10-14: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is…
• CVE-2023-32339 - CVSS 6.1 (medium), 2023-06-27: IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
• CVE-2023-22860 - CVSS 5.4 (medium), 2023-02-27: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is…
• CVE-2023-23469 - CVSS 4 (medium), 2023-02-01: IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2…
• CVE-2021-29859 - CVSS 6.8 (medium), 2022-05-02: IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1…