Ibm Cloud Pak For Business Automation vulnerabilities
24 known vulnerabilities affecting ibm/cloud_pak_for_business_automation.
Total CVEs
24
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH3MEDIUM19LOW1
Vulnerabilities
Page 2 of 2
CVE-2023-40691P4MEDIUMCVSS 4.9v18.0.0v18.0.2+9 more2023-12-18
CVE-2023-40691 [MEDIUM] CWE-200 CVE-2023-40691: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator users. IBM X-Force ID: 264805.
nvd
CVE-2024-31897P4MEDIUMCVSS 4.3≥ 18.0.0, ≤ 18.0.2≥ 19.0.1, ≤ 19.0.3+8 more2024-07-08
CVE-2024-31897 [MEDIUM] CWE-918 CVE-2024-31897: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration o
nvd
CVE-2025-36091P4MEDIUMCVSS 4.3v24.0.0v24.0.1+1 more2025-11-03
CVE-2025-36091 [MEDIUM] CWE-283 CVE-2025-36091: IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user t
IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.
nvd
CVE-2023-23469P4LOWCVSS 3.3≥ 18.0.0, ≤ 20.0.3v21.0.1+4 more2023-02-01
CVE-2023-23469 [LOW] CWE-525 CVE-2023-23469: IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20
IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.
nvd
← Previous2 / 2