Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_automation_for_ibm_cloud_pak_for_watson_aiops:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Automation For Ibm Cloud Pak For Watson Aiops (a56e2ce6-efe8-5ea6-b9b9-507abc72fccf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28764 vulnerable 2026-06-08 06:33:27.251028 IBM WebSphere Automation CSV injection
MEDIUM (6.5)
IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623.
Published: 2024-05-01T16:35:38.108Z
Updated: 2024-08-02T00:56:58.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43901 vulnerable 2026-06-08 05:49:34.957446 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure
MEDIUM (5.7)
IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components. IBM X-Force ID: 240829.
Published: 2022-12-01T18:09:20.923Z
Updated: 2025-04-23T15:57:08.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43900 vulnerable 2026-06-08 05:49:34.956170 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps security bypass
MEDIUM (5.3)
IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A local attacker can create an outbound network connection to another system. IBM X-Force ID: 240827.
Published: 2022-12-01T18:00:27.526Z
Updated: 2025-04-23T20:17:32.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22493 vulnerable 2026-06-08 05:40:53.862016 Details available
LOW (3.5)
IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449.
Published: 2022-10-07T17:00:27.016Z
Updated: 2024-09-16T16:44:05.745Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.