IBM Cloud Pak For Business Automation 23.0.2 Interim Fix 005

CPE Details

IBM Cloud Pak For Business Automation 23.0.2 Interim Fix 005
ibm
cloud_pak_for_business_automation
23.0.2
2025-01-27
12h42 +00:00
2025-01-27
12h42 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:cloud_pak_for_business_automation:23.0.2:interim_fix_005:*:*:*:*:*:*

Informations

Vendor

ibm

Product

cloud_pak_for_business_automation

Version

23.0.2

Update

interim_fix_005

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-37528 2024-07-08 02h21 +00:00 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 294293.
5.4
Moyen
CVE-2024-31897 2024-07-08 02h01 +00:00 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 288178.
4.3
Moyen
CVE-2023-50947 2024-02-04 00h11 +00:00 IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.
5.4
Moyen