Known vulnerabilities in IBM Business Automation Manager Open Editions

Vendor: IBM Corporation
Software: IBM Business Automation Manager Open Editions
Software CPE: cpe:2.3:a:ibm_corporation:ibm_business_automation_manager_open_editions:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 269
Public exploits: 25
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Business Automation Manager Open Editions IBM Business Automation Manager Open Editions is affected by 269 known vulnerabilities: 1 critical, 40 high, 174 medium, 54 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 8.0.9 IF0002 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 18 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 8.0.9 IF0002 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 16 more
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 9.3.1 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 26 more
#VU121009 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13204		 CWE-1321 Medium
No
No
 9.3.1 07.01.2026 SB2026010710
SB2026010714
SB2026012038
#VU121006 - Out-of-bounds read
CVE-2025-12183		 CWE-125 Medium
No
No
 9.3.1 07.01.2026 SB2026010701
SB2026010705
SB2026010706
and 14 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 9.3.1 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU119089 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-64518		 CWE-611 High
No
No
 9.3.1 03.12.2025 SB2025120316
SB2025120355
SB2025120424
and 1 more
#VU119088 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-38374		 CWE-611 High
No
No
 9.3.1 03.12.2025 SB2025120315
SB2026012038
#VU118228 - Exposed Dangerous Method or Function
CVE-2025-12735		 CWE-749 High
No
No
 9.3.1 10.11.2025 SB2025111066
SB2026012038
SB20260216156
#VU118187 - Resource exhaustion
CVE-2025-58185		 CWE-400 Medium
No
No
 9.3.1 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 112 more
#VU118186 - Improper input validation
CVE-2025-47912		 CWE-20 Low
No
No
 9.3.1 07.11.2025 SB2025110705
SB2025110731
SB2025120304
and 21 more
#VU118184 - Resource exhaustion
CVE-2025-61723		 CWE-400 Medium
No
No
 9.3.1 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 118 more
#VU118183 - Improper Encoding or Escaping of Output
CVE-2025-58189		 CWE-116 Low
No
No
 9.3.1 07.11.2025 SB2025110705
SB2025110711
SB2025110712
and 120 more
#VU117680 - Improper Output Neutralization for Logs
CVE-2025-55754		 CWE-117 Low
No
No
 9.3.1 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 27 more
#VU117611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11966		 CWE-79 Low
No
No
 9.3.1 23.10.2025 SB2025102374
SB2025121725
SB2026010706
and 3 more
#VU117583 - Files or Directories Accessible to External Parties
CVE-2025-11965		 CWE-552 Medium
No
No
 9.3.1 23.10.2025 SB2025102374
SB2025121725
SB2026012038
and 2 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 9.3.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 9.3.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 9.3.1 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 9.3.1 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more


Showing elements 1 - 20 out of 269