Known vulnerabilities in IBM Automation Decision Services - page 2

Vendor: IBM Corporation
Software: IBM Automation Decision Services
Software CPE: cpe:2.3:a:ibm_corporation:ibm_automation_decision_services:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 117
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Automation Decision Services IBM Automation Decision Services is affected by 117 known vulnerabilities: 1 critical, 8 high, 74 medium, 34 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7969		 CWE-79 Medium
No
No
 - 07.11.2025 SB2025110741
SB2025110755
SB2025112543
and 4 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 - 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU109244 - Missing release of memory after effective lifetime
CVE-2025-47279		 CWE-401 Medium
No
No
 - 16.05.2025 SB2025051606
SB2025052019
SB2025090104
and 5 more
#VU106936 - Resource exhaustion
CVE-2025-1634		 CWE-400 Medium
No
No
 - 03.04.2025 SB2025040340
SB2025070345
SB2025070708
and 4 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176		 CWE-121 High
No
No
 - 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 - 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 - 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU104166 - Improper input validation
CVE-2025-1390		 CWE-20 Low
No
No
 24.0.0.0.4 25.02.2025 SB2025022510
SB2025022512
SB2025030760
and 4 more
#VU103647 - Resource Management Errors
CVE-2025-0665		 CWE-399 Low
No
No
 24.0.0.0.4 05.02.2025 SB2025020531
SB2025020601
SB2025022022
and 5 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 - 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 - 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 - 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Available
No
 24.0.0.0.4 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 - 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 24.0.0.0.4 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 24.0.0.0.4 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 24.0.0.0.4 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 24.0.0.0.4 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458		 CWE-401 Medium
No
No
 24.0.0.0.4 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU76233 - Use After Free
CVE-2023-28319		 CWE-416 Low
No
No
 24.0.0.0.4 17.05.2023 SB2023051752
SB2023051761
SB2023051762
and 27 more


Showing elements 21 - 40 out of 117