IBM Cloud Pak For Business Automation 18.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.0:*:*:*:*:*:*:*
part: a version: 18.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cloud Pak For Business Automation (a4bd115d-b36d-5e7c-968b-9a2600014916) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ibm/cloud-pak |
purl2cpe | 2026-06-01 10:15:24.343039 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52365 |
vulnerable | 2026-06-08 06:52:15.009931 |
IBM Cloud Pak for Business Automation cross-site scripting
MEDIUM (6.4)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2
is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-02-05T11:28:32.866Z
Updated: 2025-02-22T22:09:50.667Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52364 |
vulnerable | 2026-06-08 06:52:14.999931 |
IBM Cloud Pak for Business Automation cross-site scripting
MEDIUM (5.4)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-02-05T11:22:17.219Z
Updated: 2025-02-22T22:09:19.772Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49348 |
vulnerable | 2026-06-08 06:50:13.526511 |
IBM Cloud Pak for Business Automation incorrect privilege assignment
MEDIUM (4.3)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2
allows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly grants access to user queries in an unexpected context.
Published: 2025-02-05T11:30:05.572Z
Updated: 2025-02-22T21:00:11.012Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37528 |
vulnerable | 2026-06-08 06:39:47.795539 |
IBM Cloud Pak for Business Automation cross-site scripting
MEDIUM (4.8)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 294293.
Published: 2024-07-08T02:21:50.815Z
Updated: 2024-08-02T03:57:39.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31897 |
vulnerable | 2026-06-08 06:35:32.290125 |
IBM Cloud Pak for Business Automation server-side request forgery
MEDIUM (4.3)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 288178.
Published: 2024-07-08T02:01:23.947Z
Updated: 2024-08-02T01:59:50.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50959 |
vulnerable | 2026-06-08 06:16:17.140110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40691 |
vulnerable | 2026-06-08 06:11:04.250528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38367 |
vulnerable | 2026-06-08 06:08:17.689946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35899 |
vulnerable | 2026-06-08 06:06:28.078915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35024 |
vulnerable | 2026-06-08 06:06:26.395221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32339 |
vulnerable | 2026-06-08 06:04:45.531555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22860 |
vulnerable | 2026-06-08 05:54:27.244961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.