Skip to content

Known vulnerabilities in IBM Cloud Pak for Business Automation

Is your version affected?

CVE Summary Score Published
CVE-2026-11864 IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005,… 6.5 Medium Sep 15, 2026
CVE-2026-12749 IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting 6.4 Medium Sep 15, 2026
CVE-2026-12750 IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting 6.4 Medium Sep 15, 2026
CVE-2026-12751 IBM Cloud Pak for Business Automation is vulnerable to HTML injection 5.4 Medium Sep 15, 2026
CVE-2026-12758 IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted… 5.4 Medium Sep 14, 2026
CVE-2026-12759 IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled… 6.5 Medium Sep 14, 2026
CVE-2026-81859 CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken… 6.2 Medium Sep 4, 2026
CVE-2026-12762 IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain… 5.3 Medium Aug 5, 2026
CVE-2025-36094 IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005,… 5.4 Medium Feb 3, 2026
CVE-2025-36436 IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005,… 6.4 Medium Feb 2, 2026
CVE-2025-36172 IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 001, 24.0.1 through 24.0.1 Interim Fix 004,… 6.4 Medium Nov 3, 2025
CVE-2025-36093 IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized… 4.8 Medium Nov 3, 2025
CVE-2025-36092 IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial… 6.5 Medium Nov 3, 2025
CVE-2025-36091 IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards… 4.3 Medium Nov 3, 2025
CVE-2025-36023 IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an… 6.5 Medium Aug 8, 2025
CVE-2025-1838 IBM Cloud Pak for Business Automation 24.0.0 and 24.0.1 through 24.0.1 IF001 Authoring allows an authenticated user to… 6.5 Medium May 3, 2025
CVE-2024-41753 IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF004 and 24.0.1 through 24.0.1 IF001 is vulnerable to… 6.1 Medium May 3, 2025
CVE-2024-49348 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… 4.3 Medium Feb 5, 2025
CVE-2024-52365 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… 6.4 Medium Feb 5, 2025
CVE-2024-52364 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… 5.4 Medium Feb 5, 2025
CVE-2024-37528 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… 4.8 Medium Jul 8, 2024
CVE-2024-31897 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… 4.3 Medium Jul 8, 2024
CVE-2023-50959 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1,… 5.3 Medium Mar 31, 2024
CVE-2023-40691 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… 4.9 Medium Dec 18, 2023
CVE-2023-35024 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… 4.6 Medium Oct 14, 2023

Other IBM products