Skip to content
OpenAdvisories

Product · IBM

WebSphere Automation

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-28764

    IBM WebSphere Automation CSV injection

    IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623.

    IBM WebSphere Automation
  • Medium 4.4
    CVE-2024-28775

    IBM WebSphere Automation cross-site scripting

    IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sess…

    IBM WebSphere Automation