Cloud Pak For Business Automation
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:if004:*:*:*:*:*:*
part: a version: 24.0.0 update: if004
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cloud Pak For Business Automation (a4bd115d-b36d-5e7c-968b-9a2600014916) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-1838 |
vulnerable | 2026-06-08 07:08:38.311815 |
IBM Cloud Pak for Business Automation denial of service
MEDIUM (6.5)
IBM Cloud Pak for Business Automation
24.0.0 and 24.0.1 through 24.0.1 IF001
Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.
Published: 2025-05-03T18:23:26.127Z
Updated: 2025-08-28T14:28:40.693Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1495 |
vulnerable | 2026-06-08 07:08:37.110422 |
IBM Business Automation Workflow missing authentication
MEDIUM (4.3)
IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation.
Published: 2025-05-03T16:53:00.666Z
Updated: 2025-08-28T14:28:22.723Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41753 |
vulnerable | 2026-06-08 06:43:55.109004 |
IBM Cloud Pak for Business Automation cross-site scripting
MEDIUM (6.1)
IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF004 and 24.0.1 through 24.0.1 IF001 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-05-03T16:06:18.716Z
Updated: 2025-08-28T14:28:03.413Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.