Login Request a demo
CP
Product
Cloud Pak for Automation
by IBM · last CVE Mar 5, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 1Medium 7Low 0
Severity
All severities9Critical1High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cloud Pak for Automation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-35899
9.8
1%
Mar 5
IBM Cloud Pak for Automation CSV injection
Affected: 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2
CVE-2021-20482
7.1
1%
Mar 30
IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Affected: 20.0.2; 20.0.3
CVE-2023-38367
6.5
0%
Feb 29
IBM Cloud Pak for Automation authentication bypass
Affected: 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2
CVE-2021-20359
6.5
1%
Feb 8
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained…
Affected: 20.0.2; 20.0.3
CVE-2021-20358
6.5
1%
Feb 8
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files
Affected: 20.0.2; 20.0.3
CVE-2020-4325
6.5
1%
Apr 2
The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to…
Affected: 19.0.3
CVE-2021-29872
5.4
1%
Jan 18
IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
Affected: before 21.0.2; 21.0.2; 21.0.2; 21.0.2; 21.0.2; 21.0.2; +10 more
CVE-2021-38966
5.4
0%
Dec 21
IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting
Affected: 21.0.2
CVE-2021-29775
5.4
1%
Jun 28
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting
Affected: 20.0.3-if002; 21.0.1
Showing 9