Skip to content
Sign in
6.5 Medium

CVE-2024-28764 IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection

Description

IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623.

Affected products and versions

Product Affected versions Fixed in
WebSphere Automation 1.7.0 No fix stated
websphere_automation_for_ibm_cloud_pak_for_watson_aiops 1.7.0 No fix stated

Other CVEs of WebSphere Automation

The 3 CVEs of WebSphere Automation →
CVE-2024-54181 IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to… 7.2 High CVE-2024-28775 IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting 4.4 Medium
Track this CVE