Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: IBM Cloud Pak for Business Automation — ibm.com/support/pages/node/7159332 Clear all filters
TI-2024-25031 CVE-2024-37528 · GHSA-jvvp-q3wq-hcgm

IBM Cloud Pak for Business Automation cross-site scripting

Priority LOW 24

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00259 Published 2024-07-08 No fix listed CWE-79
TI-2024-21008 CVE-2024-31897 · GHSA-gmp6-hg9q-f8gw

IBM Cloud Pak for Business Automation server-side request forgery

Priority LOW 20

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00297 Published 2024-07-08 No fix listed CWE-918