Known vulnerabilities in WebSphere Automation

Vendor: IBM Corporation
Software: WebSphere Automation
Software CPE: cpe:2.3:a:ibm_corporation:websphere_automation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Automation WebSphere Automation is affected by 28 known vulnerabilities: 1 critical, 4 high, 17 medium, 6 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 14 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 16 more
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514		 CWE-918 Medium
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 4 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515		 CWE-915 Medium
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 6 more
#VU133398 - Incorrect Authorization
CVE-2026-41115		 CWE-863 Low
No
No
 1.13.0 04.06.2026 SB20260604101
SB2026080308
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554		 CWE-362 High
No
No
 1.12.1 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 5 more
#VU120254 - Improper Handling of Length Parameter Inconsistency
CVE-2025-14847		 CWE-130 High
Available
Exploited
 1.11.1 23.12.2025 SB2025122318
SB2026011607
SB2026012973
and 9 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 1.8.2 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU89089 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28775		 CWE-79 Low
No
No
 1.7.1 01.05.2024 SB2024050119
#VU89085 - Improper Neutralization of Formula Elements in a CSV File
CVE-2024-28764		 CWE-1236 Low
No
No
 1.7.1 01.05.2024 SB2024050115
#VU68839 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-30580		 CWE-94 Low
No
No
 1.5.2 31.10.2022 SB2022103122
SB2023022738
SB2023033008
and 22 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 1.5.2 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 1.5.2 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 1.5.2 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 1.5.2 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66063 - Resource exhaustion
CVE-2022-30630		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more


Showing elements 1 - 20 out of 28