Login Request a demo
CP
Product
Cloud Pak for Automation
by IBM · last CVE Mar 5, 2024
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 1Medium 9Low 0
Severity
All severities11Critical1High1Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cloud Pak for Automation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-38367
6.5
0%
Feb 29
IBM Cloud Pak for Automation authentication bypass
Affected: 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2
CVE-2021-38900
6.5
1%
Dec 21
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to…
Affected: 21.0.2
CVE-2021-20359
6.5
1%
Feb 8
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained…
Affected: 20.0.2; 20.0.3
CVE-2021-20358
6.5
1%
Feb 8
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files
Affected: 20.0.2; 20.0.3
CVE-2020-4325
6.5
1%
Apr 2
The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to…
Affected: 19.0.3
CVE-2021-29872
5.4
1%
Jan 18
IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
Affected: 21.0.1; 21.0.2
CVE-2021-38966
5.4
0%
Dec 21
IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting
Affected: 21.0.2
CVE-2021-38893
5.4
1%
Dec 21
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting
Affected: 21.0.2
CVE-2021-29775
5.4
1%
Jun 28
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting
Affected: 20.0.3-if002; 21.0.1
Showing 9