Known vulnerabilities in IBM Automation Decision Services

Vendor: IBM Corporation
Software: IBM Automation Decision Services
Software CPE: cpe:2.3:a:ibm_corporation:ibm_automation_decision_services:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 117
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Automation Decision Services IBM Automation Decision Services is affected by 117 known vulnerabilities: 1 critical, 8 high, 74 medium, 34 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144038 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-1002		 CWE-444 Low
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 18.08.2026 SB2026081830
SB2026081831
SB2026081835
and 3 more
#VU143925 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-33672		 CWE-1321 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 18.08.2026 SB2026081815
SB2026081816
SB2026081831
and 5 more
#VU139384 - Inefficient Regular Expression Complexity
CVE-2026-33671		 CWE-1333 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 26.07.2026 SB2026072609
SB2026072616
SB2026081816
and 6 more
#VU127582 - Allocation of Resources Without Limits or Throttling
CVE-2026-22036		 CWE-770 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 24.04.2026 SB20260424138
SB20260424156
SB20260424157
and 9 more
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895		 CWE-200 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 19 more
#VU124825 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-29063		 CWE-1321 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 02.04.2026 SB2026040246
SB2026040612
SB2026040627
and 36 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871		 CWE-770 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 17 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 23 more
#VU123491 - Memory corruption
CVE-2026-29062		 CWE-119 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 04.03.2026 SB2026030413
SB2026060232
SB2026060234
and 3 more
#VU120254 - Improper Handling of Length Parameter Inconsistency
CVE-2025-14847		 CWE-130 High
Available
Exploited
 24.0.0.0.8, 24.0.1.0.8 23.12.2025 SB2025122318
SB2026011607
SB2026012973
and 9 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735		 CWE-93 Medium
No
No
 24.0.0.0.9, 24.0.1.0.8, 25.0.0.0.4 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 25 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 23.0.1.0.6, 24.0.0.0.8, 25.0.0.0.3 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 55 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574		 CWE-668 Low
No
No
 23.0.1.0.6, 24.0.0.0.8, 25.0.0.0.3 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 10 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 23.0.1.0.6, 24.0.0.0.8, 25.0.0.0.3 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 63 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 - 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU104166 - Improper input validation
CVE-2025-1390		 CWE-20 Low
No
No
 24.0.0.0.4 25.02.2025 SB2025022510
SB2025022512
SB2025030760
and 4 more
#VU103322 - Out-of-bounds read
CVE-2024-36124		 CWE-125 Medium
No
No
 23.0.1.0.6, 24.0.0.0.8, 25.0.0.0.3 27.01.2025 SB2025012734
SB2025012735
SB2025013120
and 7 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 24.0.0.0.4 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 24.0.0.0.4 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 24.0.0.0.4 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more


Showing elements 1 - 20 out of 117