VendorsIBMcloud_pak_for_business_automationall versions
Vulnerabilities

IBM Cloud Pak For Business Automation

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

27CVEs
CVE-2023-35899
IBM Cloud Pak for Automation CSV injection
Published 2024-03-05 · Analyzed
9.8EPSS 0.008
CVE-2025-36094
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
Published 2026-02-03 · Analyzed
8.1EPSS 0.002
CVE-2023-35024
IBM Cloud Pak for Business Automation cross-site scripting
Published 2023-10-14 · Modified
7.6EPSS 0.004
CVE-2025-36093
security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.
Published 2025-11-03 · Analyzed
7.4EPSS 0.002
CVE-2021-29859
IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007) could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 206081.
Published 2022-05-02 · Modified
6.8EPSS 0.003
CVE-2023-50959
IBM Cloud Pak for Business Automation information disclosure
Published 2024-03-31 · Modified
6.5EPSS 0.005
CVE-2025-36092
IBM Business Automation Insights improper input validation
Published 2025-11-03 · Analyzed
6.5EPSS 0.004
CVE-2023-38367
IBM Cloud Pak for Automation authentication bypass
Published 2024-02-29 · Modified
6.5EPSS 0.004
CVE-2025-1838
IBM Cloud Pak for Business Automation denial of service
Published 2025-05-03 · Analyzed
6.5EPSS 0.004
CVE-2025-36023
IBM Cloud Pak for Business Automation security bypass
Published 2025-08-08 · Analyzed
6.5EPSS 0.003
CVE-2024-49348
IBM Cloud Pak for Business Automation incorrect privilege assignment
Published 2025-02-05 · Analyzed
6.5EPSS 0.003
CVE-2025-36436
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
Published 2026-02-02 · Analyzed
6.4EPSS 0.002
CVE-2024-52365
IBM Cloud Pak for Business Automation cross-site scripting
Published 2025-02-05 · Analyzed
6.4EPSS 0.002
CVE-2025-36172
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002
Published 2025-11-03 · Analyzed
6.4EPSS 0.002
CVE-2026-12749
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
Published 2026-09-15 · Analyzed
6.4EPSS 0.002
CVE-2026-12750
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
Published 2026-09-15 · Analyzed
6.4EPSS 0.002
CVE-2023-32339
IBM Business Automation Workflow cross-site scripting
Published 2023-06-27 · Modified
6.1EPSS 0.005
CVE-2024-41753
IBM Cloud Pak for Business Automation cross-site scripting
Published 2025-05-03 · Analyzed
6.1EPSS 0.002
CVE-2023-50947
IBM Business Automation Workflow cross-site scripting
Published 2024-02-04 · Modified
5.4EPSS 0.004
CVE-2023-22860
IBM Cloud Pak for Business Automation cross-site scripting
Published 2023-02-27 · Modified
5.4EPSS 0.004
CVE-2024-37528
IBM Cloud Pak for Business Automation cross-site scripting
Published 2024-07-08 · Modified
5.4EPSS 0.003
CVE-2024-52364
IBM Cloud Pak for Business Automation cross-site scripting
Published 2025-02-05 · Analyzed
5.4EPSS 0.002
CVE-2026-12751
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
Published 2026-09-15 · Analyzed
5.4EPSS 0.002
CVE-2023-40691
IBM Cloud Pak for Business Automation information disclosure
Published 2023-12-18 · Modified
4.9EPSS 0.007
CVE-2025-36091
IBM Business Automation Insights unverified ownership
Published 2025-11-03 · Analyzed
4.3EPSS 0.003
CVE-2024-31897
IBM Cloud Pak for Business Automation server-side request forgery
Published 2024-07-08 · Modified
4.3EPSS 0.003
CVE-2023-23469
IBM Cloud Pak for Business Automation information disclosure
Published 2023-02-01 · Modified
4.0EPSS 0.002