CVE-2025-1838: falha de média gravidade em IBM Cloud Pak for Business Automation
IBM Cloud Pak for Business Automation denial of service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.4%
IBM Cloud Pak for Business Automation
24.0.0 and 24.0.1 through 24.0.1 IF001
Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
IBM · Cloud Pak for Business AutomationCVEs relacionadas — IBM Cloud Pak for Business Automation
No mesmo produto, das mais perigosas para as menos.
CVE-2023-40691MEDIUMIBM Cloud Pak for Business Automation information disclosureEPSS 0.7%CVE-2023-50959MEDIUMIBM Cloud Pak for Business Automation information disclosureEPSS 0.5%CVE-2023-35024MEDIUMIBM Cloud Pak for Business Automation cross-site scriptingEPSS 0.4%CVE-2023-22860MEDIUMIBM Cloud Pak for Business Automation cross-site scriptingEPSS 0.4%CVE-2026-11864MEDIUMMultiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.EPSS 0.4%CVE-2026-12759MEDIUMMultiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.EPSS 0.4%