4.3
Moyenne
CVE-2024-31897 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,…
Description
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 288178.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cloud Pak for Business Automation | Versions non publiées |
Autres CVE de Cloud Pak for Business Automation
Les 28 CVE de Cloud Pak for Business Automation →
CVE-2026-11864
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005,…
6.5
Moyenne
CVE-2026-12749
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Moyenne
CVE-2026-12750
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Moyenne
CVE-2026-12751
IBM Cloud Pak for Business Automation is vulnerable to HTML injection
5.4
Moyenne