Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cloud Pak For Business Automation — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in Cloud Pak For Business Automation, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations associated with the Cloud Pak for Business Automation product offered by IBM. It aggregates data related to security flaws that may impact the integrity, confidentiality, or availability of this enterprise automation platform. The content herein compiles vulnerability records spanning from early 2020 through the present, capturing a comprehensive timeline of disclosed security issues. Readers can utilize this resource to track vendor advisories, understand the specific characteristics of each weakness class, and examine the historical vulnerability profile of the product. This collection includes information on how these flaws were identified, their severity ratings, and the timeline of patch releases. By consolidating these details, the page aims to provide a clear view of the security landscape for this specific software stack. Users may explore entries to see which components are most frequently affected and how remediation efforts have evolved over time. The data is organized to facilitate efficient searching and comparative analysis across different versions and release cycles. This approach supports security teams in prioritizing mitigation strategies and ensuring compliance with organizational risk management policies. The information presented is derived from public advisories and verified security reports to maintain accuracy and reliability.

Vendor: IBM

CVE IDTitleCVSSSeverityPublished
CVE-2026-12762 Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights CWE-538 5.3 Medium2026-08-05
CVE-2025-36094 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. CWE-1284 5.4 Medium2026-02-03
CVE-2025-36436 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. CWE-79 6.4 Medium2026-02-02
CVE-2025-36172 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002 CWE-79 6.4 Medium2025-11-03
CVE-2025-36093 security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025. CWE-602 4.8 Medium2025-11-03
CVE-2025-36092 IBM Business Automation Insights improper input validation CWE-1284 6.5 Medium2025-11-03
CVE-2025-36091 IBM Business Automation Insights unverified ownership CWE-283 4.3 Medium2025-11-03
CVE-2025-36023 IBM Cloud Pak for Business Automation security bypass CWE-639 6.5 Medium2025-08-08
CVE-2025-1838 IBM Cloud Pak for Business Automation denial of service CWE-602 6.5 Medium2025-05-03
CVE-2024-41753 IBM Cloud Pak for Business Automation cross-site scripting CWE-79 6.1 Medium2025-05-03
CVE-2024-49348 IBM Cloud Pak for Business Automation incorrect privilege assignment CWE-266 4.3 Medium2025-02-05
CVE-2024-52365 IBM Cloud Pak for Business Automation cross-site scripting CWE-79 6.4 Medium2025-02-05
CVE-2024-52364 IBM Cloud Pak for Business Automation cross-site scripting CWE-79 5.4 Medium2025-02-05
CVE-2024-37528 IBM Cloud Pak for Business Automation cross-site scripting CWE-79 4.8 Medium2024-07-08
CVE-2024-31897 IBM Cloud Pak for Business Automation server-side request forgery CWE-918 4.3 Medium2024-07-08
CVE-2023-50959 IBM Cloud Pak for Business Automation information disclosure CWE-497 5.3 Medium2024-03-31
CVE-2023-40691 IBM Cloud Pak for Business Automation information disclosure CWE-200 4.9 Medium2023-12-18
CVE-2023-35024 IBM Cloud Pak for Business Automation cross-site scripting CWE-79 4.6 Medium2023-10-14
CVE-2023-22860 IBM Cloud Pak for Business Automation cross-site scripting CWE-79 5.4 Medium2023-02-27
CVE-2023-23469 IBM Cloud Pak for Business Automation information disclosure 4.0 Medium2023-02-01
CVE-2021-29859 IBM Cloud Pak for Business Automation安全漏洞 6.1 -2022-05-02

All 21 known CVE vulnerabilities affecting Cloud Pak For Business Automation with full Chinese analysis, references, and POCs where available.