Known vulnerabilities in IBM Automation Decision Services - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_automation_decision_services:*:*:*:*:*:*:*:*
Total vulnerabilities: 117
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Automation Decision Services IBM Automation Decision Services is affected by 117 known vulnerabilities: 1 critical, 8 high, 74 medium, 34 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7969
CWE-79 Medium
No
No
- 07.11.2025 SB2025110741
SB2025110755
SB2025112543
and 4 more
#VU106936 - Resource exhaustion
CVE-2025-1634
CWE-400 Medium
No
No
- 03.04.2025 SB2025040340
SB2025070345
SB2025070708
and 4 more
#VU106253 - Improper input validation
CVE-2025-22870
CWE-20 Medium
Available
No
24.0.0.0.4 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176
CWE-121 High
No
No
- 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152
CWE-918 Medium
Available
No
24.0.0.0.4 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 43 more
#VU105387 - Improper input validation
CVE-2025-27516
CWE-20 Low
No
No
24.0.0.0.4 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU103647 - Resource Management Errors
CVE-2025-0665
CWE-399 Low
No
No
24.0.0.0.4 05.02.2025 SB2025020531
SB2025020601
SB2025022022
and 5 more
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565
CWE-835 Medium
No
No
24.0.0.0.4 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU101972 - Security Features
CVE-2024-56326
CWE-254 Low
No
No
24.0.0.0.4 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101971 - Security Features
CVE-2024-56201
CWE-254 Low
No
No
24.0.0.0.4 27.12.2024 SB2024122789
SB2025010203
SB2025010322
and 62 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Available
No
24.0.0.0.4 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141
CWE-200 Medium
No
No
24.0.0.0.4 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254
CWE-674 Medium
No
No
24.0.0.0.4 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232
CWE-185 Medium
No
No
24.0.0.0.4 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462
CWE-401 Medium
No
No
24.0.0.0.4 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Available
No
24.0.0.0.4 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
24.0.0.0.4 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289
CWE-200 Low
No
No
24.0.0.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU76233 - Use After Free
CVE-2023-28319
CWE-416 Low
No
No
24.0.0.0.4 17.05.2023 SB2023051752
SB2023051761
SB2023051762
and 27 more
#VU66709 - Improper input validation
CVE-2022-2794
CWE-20 Medium
No
No
24.0.0.0.4 23.08.2022 SB2022082311
SB2025080408


Showing elements 41 - 60 out of 117