IBM Cloud Pak For Business Automation 20.0.3
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.3:*:*:*:*:*:*:*
part: a version: 20.0.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cloud Pak For Business Automation (a4bd115d-b36d-5e7c-968b-9a2600014916) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ibm/cloud-pak |
purl2cpe | 2026-06-01 10:15:24.343054 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52365 |
vulnerable | 2026-06-08 06:52:15.010339 |
IBM Cloud Pak for Business Automation cross-site scripting
MEDIUM (6.4)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2
is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-02-05T11:28:32.866Z
Updated: 2025-02-22T22:09:50.667Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52364 |
vulnerable | 2026-06-08 06:52:15.004905 |
IBM Cloud Pak for Business Automation cross-site scripting
MEDIUM (5.4)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-02-05T11:22:17.219Z
Updated: 2025-02-22T22:09:19.772Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49348 |
vulnerable | 2026-06-08 06:50:13.541157 |
IBM Cloud Pak for Business Automation incorrect privilege assignment
MEDIUM (4.3)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2
allows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly grants access to user queries in an unexpected context.
Published: 2025-02-05T11:30:05.572Z
Updated: 2025-02-22T21:00:11.012Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50959 |
vulnerable | 2026-06-08 06:16:17.145147 |
IBM Cloud Pak for Business Automation information disclosure
MEDIUM (5.3)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1,2 2.0.2, 23.0.1, and 23.0.2 may allow end users to query more documents than expected from a connected Enterprise Content Management system when configured to use a system account. IBM X-Force ID: 275938.
Published: 2024-03-31T11:56:26.054Z
Updated: 2024-08-02T22:23:43.912Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40691 |
vulnerable | 2026-06-08 06:11:04.256191 |
IBM Cloud Pak for Business Automation information disclosure
MEDIUM (4.9)
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator users. IBM X-Force ID: 264805.
Published: 2023-12-18T20:29:00.344Z
Updated: 2024-08-02T18:38:51.164Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38367 |
vulnerable | 2026-06-08 06:08:17.694541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35899 |
vulnerable | 2026-06-08 06:06:28.082605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35024 |
vulnerable | 2026-06-08 06:06:26.400552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32339 |
vulnerable | 2026-06-08 06:04:45.534724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22860 |
vulnerable | 2026-06-08 05:54:27.247581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.