# IBM Cloud Pak for Business Automation.

Every CVE that names IBM Cloud Pak for Business Automation among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-11864.md)
  `CVE-2026-11864` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Other injection
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-12749.md)
  `CVE-2026-12749` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-12750.md)
  `CVE-2026-12750` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-12751.md)
  `CVE-2026-12751` · CVE record: IBM Cloud Pak for Business Automation · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-12758.md)
  `CVE-2026-12758` · CVE record: IBM Cloud Pak for Business Automation · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-12759.md)
  `CVE-2026-12759` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Denial of service
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-81859.md)
  `CVE-2026-81859` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.2 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights](https://agentprime.io/advisories/CVE-2026-12762.md)
  `CVE-2026-12762` · CVE record: IBM Cloud Pak For Business Automation · CVSS 5.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Information disclosure
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.](https://agentprime.io/advisories/CVE-2025-36094.md)
  `CVE-2025-36094` · CVE record: IBM Cloud Pak for Business Automation · CVSS 5.4 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-1284
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.](https://agentprime.io/advisories/CVE-2025-36436.md)
  `CVE-2025-36436` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.4 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site scripting (XSS)
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002](https://agentprime.io/advisories/CVE-2025-36172.md)
  `CVE-2025-36172` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.4 Medium · Not analysed yet · Published 3 Nov 2025 · Tags: Cross-site scripting (XSS)
- [security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.](https://agentprime.io/advisories/CVE-2025-36093.md)
  `CVE-2025-36093` · CVE record: IBM Cloud Pak For Business Automation · CVSS 4.8 Medium · Not analysed yet · Published 3 Nov 2025 · Tags: CWE-602
- [IBM Business Automation Insights improper input validation](https://agentprime.io/advisories/CVE-2025-36092.md)
  `CVE-2025-36092` · CVE record: IBM Cloud Pak For Business Automation · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2025 · Tags: CWE-1284
- [IBM Business Automation Insights unverified ownership](https://agentprime.io/advisories/CVE-2025-36091.md)
  `CVE-2025-36091` · CVE record: IBM Cloud Pak For Business Automation · CVSS 4.3 Medium · Not analysed yet · Published 3 Nov 2025 · Tags: CWE-283
- [IBM Cloud Pak for Business Automation security bypass](https://agentprime.io/advisories/CVE-2025-36023.md)
  `CVE-2025-36023` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.5 Medium · Not analysed yet · Published 8 Aug 2025 · Tags: Broken access control
- [IBM Cloud Pak for Business Automation denial of service](https://agentprime.io/advisories/CVE-2025-1838.md)
  `CVE-2025-1838` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.5 Medium · Not analysed yet · Published 3 May 2025 · Tags: CWE-602
- [IBM Cloud Pak for Business Automation cross-site scripting](https://agentprime.io/advisories/CVE-2024-41753.md)
  `CVE-2024-41753` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.1 Medium · Not analysed yet · Published 3 May 2025 · Tags: Cross-site scripting (XSS)
- [IBM Cloud Pak for Business Automation incorrect privilege assignment](https://agentprime.io/advisories/CVE-2024-49348.md)
  `CVE-2024-49348` · CVE record: IBM Cloud Pak for Business Automation · CVSS 4.3 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Privilege escalation
- [IBM Cloud Pak for Business Automation cross-site scripting](https://agentprime.io/advisories/CVE-2024-52365.md)
  `CVE-2024-52365` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.4 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Cross-site scripting (XSS)
- [IBM Cloud Pak for Business Automation cross-site scripting](https://agentprime.io/advisories/CVE-2024-52364.md)
  `CVE-2024-52364` · CVE record: IBM Cloud Pak for Business Automation · CVSS 5.4 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Cross-site scripting (XSS)
- [IBM Cloud Pak for Business Automation cross-site scripting](https://agentprime.io/advisories/CVE-2024-37528.md)
  `CVE-2024-37528` · CVE record: IBM Cloud Pak for Business Automation · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2024 · Tags: Cross-site scripting (XSS)
- [IBM Cloud Pak for Business Automation server-side request forgery](https://agentprime.io/advisories/CVE-2024-31897.md)
  `CVE-2024-31897` · CVE record: IBM Cloud Pak for Business Automation · CVSS 4.3 Medium · Not analysed yet · Published 8 Jul 2024 · Tags: Server-side request forgery (SSRF)
- [IBM Cloud Pak for Business Automation information disclosure](https://agentprime.io/advisories/CVE-2023-50959.md)
  `CVE-2023-50959` · CVE record: IBM Cloud Pak for Business Automation · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2024 · Tags: Information disclosure
- [IBM Cloud Pak for Business Automation information disclosure](https://agentprime.io/advisories/CVE-2023-40691.md)
  `CVE-2023-40691` · CVE record: IBM Cloud Pak for Business Automation · CVSS 4.9 Medium · Not analysed yet · Published 18 Dec 2023 · Tags: Information disclosure
- [IBM Cloud Pak for Business Automation cross-site scripting](https://agentprime.io/advisories/CVE-2023-35024.md)
  `CVE-2023-35024` · CVE record: IBM Cloud Pak for Business Automation · CVSS 4.6 Medium · Not analysed yet · Published 14 Oct 2023 · Tags: Cross-site scripting (XSS)
- [IBM Cloud Pak for Business Automation cross-site scripting](https://agentprime.io/advisories/CVE-2023-22860.md)
  `CVE-2023-22860` · CVE record: IBM Cloud Pak for Business Automation · CVSS 5.4 Medium · Not analysed yet · Published 27 Feb 2023 · Tags: Cross-site scripting (XSS)
- [IBM Cloud Pak for Business Automation information disclosure](https://agentprime.io/advisories/CVE-2023-23469.md)
  `CVE-2023-23469` · CVE record: IBM Cloud Pak for Business Automation · CVSS 4.0 Medium · Not analysed yet · Published 1 Feb 2023 · Tags: CWE-525
- [IBM Cloud Pak for Business Automation: IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation…](https://agentprime.io/advisories/CVE-2021-29859.md)
  `CVE-2021-29859` · CVE record: IBM Cloud Pak for Business Automation · CVSS 3.5 Low · Not analysed yet · Published 2 May 2022

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-cloud-pak-for-business-automation>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-cloud-pak-for-business-automation/>. Everything for agents: <https://agentprime.io/llms.txt>.