CP
Product
Cloud Pak For Automation
7
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Cloud Pak For Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20359 | 6.5 | Feb 8 | IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained… Affected: 20.0.2; 20.0.3 |
| CVE-2021-20358 | 6.5 | Feb 8 | IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files Affected: 20.0.2; 20.0.3 |
| CVE-2020-4325 | 6.5 | Apr 2 | The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to… Affected: 19.0.3 |
| CVE-2021-29872 | 5.4 | Jan 18 | IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST… Affected: before 21.0.2; 21.0.2; 21.0.2; 21.0.2; 21.0.2; 21.0.2; +10 more |
| CVE-2021-38966 | 5.4 | Dec 21 | IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting Affected: 21.0.2 |
| CVE-2021-29775 | 5.4 | Jun 28 | IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting Affected: 20.0.3-if002; 21.0.1 |
Showing 6