Known vulnerabilities in IBM Cloud Automation Manager

Vendor: IBM Corporation
Software: IBM Cloud Automation Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_automation_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 68
Public exploits: 7
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Automation Manager IBM Cloud Automation Manager is affected by 68 known vulnerabilities: 8 high, 45 medium, 15 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77189 - Protection Mechanism Failure
CVE-2019-4133		 CWE-693 Low
No
No
 3.1.2.2, 3.2.0 13.06.2023 SB2019051113
#VU77188 - Exposure of sensitive information to an unauthorized actor
CVE-2019-4132		 CWE-200 Low
No
No
 3.1.2.1 13.06.2023 SB2019051112
#VU77187 - Missing Encryption of Sensitive Data
CVE-2019-4616		 CWE-311 Low
No
No
 3.2.1.1, 3.2.1.2 13.06.2023 SB2020110639
#VU77186 - Session Fixation
CVE-2019-4617		 CWE-384 Low
No
No
 3.2.1.1 13.06.2023 SB2020110638
#VU76973 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-7769		 CWE-74 High
No
No
 4.2.0.1 iFix 2 06.06.2023 SB2021122244
SB2024101738
#VU76823 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2021-21368		 CWE-1321 Medium
No
No
 4.2.0.1 iFix 3 02.06.2023 SB2021031224
SB2021122243
#VU76822 - Improper Interaction Between Multiple Correctly-Behaving Entities
CVE-2021-21366		 CWE-435 Low
No
No
 4.2.0.1 iFix 3 02.06.2023 SB2021122243
SB2023061641
#VU76820 - Type confusion
CVE-2021-23807		 CWE-843 High
No
No
 4.2.0.1 iFix 5 02.06.2023 SB2021122242
SB2024022730
SB2022072145
and 1 more
#VU63702 - Allocation of Resources Without Limits or Throttling
CVE-2020-15168		 CWE-770 Medium
No
No
 - 26.05.2022 SB2020091032
SB2022052615
SB2022060618
and 12 more
#VU52985 - Incorrect Regular Expression
CVE-2020-28469		 CWE-185 Medium
No
No
 - 10.05.2021 SB2021051002
SB2021051004
SB2021072625
and 26 more
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774		 CWE-94 Medium
No
No
 - 06.05.2021 SB2020111735
SB2021050615
SB2021092814
and 24 more
#VU50273 - Permissions, Privileges, and Access Controls
CVE-2021-21284		 CWE-264 Medium
No
No
 - 02.02.2021 SB2021020305
SB2021020611
SB2021020922
and 9 more
#VU50274 - Resource exhaustion
CVE-2021-21285		 CWE-400 Medium
No
No
 - 02.02.2021 SB2021020305
SB2021020611
SB2021020923
and 9 more
#VU48480 - Improper input validation
CVE-2020-28362		 CWE-20 Medium
No
No
 - 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU47225 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7720		 CWE-94 Medium
No
No
 - 30.09.2020 SB20200930105
SB2020122208
SB2020112518
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 - 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 - 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU47482 - Command injection
CVE-2020-8178		 CWE-77 High
No
No
 - 15.07.2020 SB2020100903
SB2020112515
SB2022030733
and 1 more
#VU28556 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-13401		 CWE-451 Medium
Available
No
 - 03.06.2020 SB2020060335
SB2020060336
SB2020062305
and 7 more
#VU29673 - Improper Certificate Validation
CVE-2020-7919		 CWE-295 Medium
No
No
 - 16.03.2020 SB2020031611
SB2020020725
SB2020020726
and 15 more


Showing elements 1 - 20 out of 68