Known vulnerabilities in WebSphere Automation

Vendor: IBM Corporation
Software: WebSphere Automation
Software CPE: cpe:2.3:a:ibm_corporation:websphere_automation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Automation WebSphere Automation is affected by 28 known vulnerabilities: 1 critical, 4 high, 17 medium, 6 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 40 more
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514		 CWE-918 Medium
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 18 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515		 CWE-915 Medium
No
No
 1.13.0 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 20 more
#VU133398 - Incorrect Authorization
CVE-2026-41115		 CWE-863 Low
No
No
 1.13.0 04.06.2026 SB20260604101
SB2026080308
SB20261022296
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554		 CWE-362 High
No
No
 1.12.1 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 9 more
#VU120254 - Improper Handling of Length Parameter Inconsistency
CVE-2025-14847		 CWE-130 High
Available
Exploited
 1.11.1 23.12.2025 SB2025122318
SB2026011607
SB2026012973
and 9 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 1.8.2 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU89089 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28775		 CWE-79 Low
No
No
 1.7.1 01.05.2024 SB2024050119
#VU89085 - Improper Neutralization of Formula Elements in a CSV File
CVE-2024-28764		 CWE-1236 Low
No
No
 1.7.1 01.05.2024 SB2024050115
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 1.5.2 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 1.5.2 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 1.5.2 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66062 - Resource exhaustion
CVE-2022-30631		 CWE-400 Medium
No
No
 1.5.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more


Showing elements 1 - 20 out of 28