| CVE-2023-35899 |
IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2,…
|
7.0
High
|
Mar 5, 2024 |
| CVE-2023-38367 |
IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2,…
|
6.5
Medium
|
Feb 29, 2024 |
| CVE-2021-29872 |
IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header…
|
5.4
Medium
|
Jan 18, 2022 |
| CVE-2021-38966 |
IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting
|
5.4
Medium
|
Dec 21, 2021 |
| CVE-2021-38900 |
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a…
|
4.9
Medium
|
Dec 21, 2021 |
| CVE-2021-38893 |
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable…
|
6.4
Medium
|
Dec 21, 2021 |
| CVE-2021-29775 |
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are…
|
6.4
Medium
|
Jun 28, 2021 |
| CVE-2021-29751 |
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an…
|
3.1
Low
|
Jun 28, 2021 |
| CVE-2021-20482 |
IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack…
|
7.1
High
|
Mar 30, 2021 |
| CVE-2021-20359 |
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores…
|
6.5
Medium
|
Feb 8, 2021 |
| CVE-2021-20358 |
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API…
|
6.5
Medium
|
Feb 8, 2021 |