Advisories · Technology

IBM Cloud Pak for Business Automation.

Every CVE that names IBM Cloud Pak for Business Automation among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-11864 CVE record

CVSS 6.5 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Other injection
Not analysed yet 15 Sept 2026
CVE-2026-12749 CVE record

CVSS 6.4 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 15 Sept 2026
CVE-2026-12750 CVE record

CVSS 6.4 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 15 Sept 2026
CVE-2026-12751 CVE record

CVSS 5.4 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 15 Sept 2026
CVE-2026-12758 CVE record

CVSS 5.4 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Broken access control
Not analysed yet 14 Sept 2026
CVE-2026-12759 CVE record

CVSS 6.5 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Denial of service
Not analysed yet 14 Sept 2026
CVE-2026-81859 CVE record

CVSS 6.2 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Weak cryptography or TLS
Not analysed yet 4 Sept 2026
CVE-2026-12762 CVE record

CVSS 5.3 Medium

Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights
- IBM Cloud Pak For Business Automation
- Information disclosure
Not analysed yet 5 Aug 2026
CVE-2025-36094 CVE record

CVSS 5.4 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
- IBM Cloud Pak for Business Automation
- CWE-1284
Not analysed yet 3 Feb 2026
CVE-2025-36436 CVE record

CVSS 6.4 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 2 Feb 2026
CVE-2025-36172 CVE record

CVSS 6.4 Medium

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2025
CVE-2025-36093 CVE record

CVSS 4.8 Medium

security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.
- IBM Cloud Pak For Business Automation
- CWE-602
Not analysed yet 3 Nov 2025
CVE-2025-36092 CVE record

CVSS 6.5 Medium

IBM Business Automation Insights improper input validation
- IBM Cloud Pak For Business Automation
- CWE-1284
Not analysed yet 3 Nov 2025
CVE-2025-36091 CVE record

CVSS 4.3 Medium

IBM Business Automation Insights unverified ownership
- IBM Cloud Pak For Business Automation
- CWE-283
Not analysed yet 3 Nov 2025
CVE-2025-36023 CVE record

CVSS 6.5 Medium

IBM Cloud Pak for Business Automation security bypass
- IBM Cloud Pak for Business Automation
- Broken access control
Not analysed yet 8 Aug 2025
CVE-2025-1838 CVE record

CVSS 6.5 Medium

IBM Cloud Pak for Business Automation denial of service
- IBM Cloud Pak for Business Automation
- CWE-602
Not analysed yet 3 May 2025
CVE-2024-41753 CVE record

CVSS 6.1 Medium

IBM Cloud Pak for Business Automation cross-site scripting
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 3 May 2025
CVE-2024-49348 CVE record

CVSS 4.3 Medium

IBM Cloud Pak for Business Automation incorrect privilege assignment
- IBM Cloud Pak for Business Automation
- Privilege escalation
Not analysed yet 5 Feb 2025
CVE-2024-52365 CVE record

CVSS 6.4 Medium

IBM Cloud Pak for Business Automation cross-site scripting
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2025
CVE-2024-52364 CVE record

CVSS 5.4 Medium

IBM Cloud Pak for Business Automation cross-site scripting
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2025
CVE-2024-37528 CVE record

CVSS 4.8 Medium

IBM Cloud Pak for Business Automation cross-site scripting
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2024
CVE-2024-31897 CVE record

CVSS 4.3 Medium

IBM Cloud Pak for Business Automation server-side request forgery
- IBM Cloud Pak for Business Automation
- Server-side request forgery (SSRF)
Not analysed yet 8 Jul 2024
CVE-2023-50959 CVE record

CVSS 5.3 Medium

IBM Cloud Pak for Business Automation information disclosure
- IBM Cloud Pak for Business Automation
- Information disclosure
Not analysed yet 31 Mar 2024
CVE-2023-40691 CVE record

CVSS 4.9 Medium

IBM Cloud Pak for Business Automation information disclosure
- IBM Cloud Pak for Business Automation
- Information disclosure
Not analysed yet 18 Dec 2023
CVE-2023-35024 CVE record

CVSS 4.6 Medium

IBM Cloud Pak for Business Automation cross-site scripting
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2023
CVE-2023-22860 CVE record

CVSS 5.4 Medium

IBM Cloud Pak for Business Automation cross-site scripting
- IBM Cloud Pak for Business Automation
- Cross-site scripting (XSS)
Not analysed yet 27 Feb 2023
CVE-2023-23469 CVE record

CVSS 4.0 Medium

IBM Cloud Pak for Business Automation information disclosure
- IBM Cloud Pak for Business Automation
- CWE-525
Not analysed yet 1 Feb 2023
CVE-2021-29859 CVE record

CVSS 3.5 Low

IBM Cloud Pak for Business Automation: IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation…
- IBM Cloud Pak for Business Automation
Not analysed yet 2 May 2022