Cloud Pak for Automation

8 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-38367

  IBM Cloud Pak for Automation authentication bypass

  IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2) allows CRUD Operations with an invalid token. Thi…

  IBM Cloud Pak for Automation
  Feb 29, 2024
• Medium 5.4
  CVE-2021-29872

  IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header inje…

  IBM Cloud Pak for Automation
  Jan 18, 2022
• Medium 5.4
  CVE-2021-38966

  IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…

  IBM Cloud Pak for Automation
  Dec 21, 2021
• Medium 4.9
  CVE-2021-38900

  IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a p…

  IBM Business Automation Workflow Cloud Pak for Automation
  Dec 21, 2021
• Medium 6.4
  CVE-2021-38893

  IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable …

  IBM Cloud Pak for Automation Business Process Manager Standard
  Dec 21, 2021
• Medium 6.4
  CVE-2021-29775

  IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerab…

  IBM Business Automation Workflow Cloud Pak for Automation
  Jun 28, 2021
• Medium 6.5
  CVE-2021-20359

  IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potential…

  IBM Cloud Pak for Automation
  Feb 8, 2021
• Medium 6.5
  CVE-2021-20358

  IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connect…

  IBM Cloud Pak for Automation
  Feb 8, 2021