CVE-2021-38966

Mô tả

Tham khảo

• exchange.xforce.ibmcloud.com/vulnerabilities/212357 · VDB Entry
• ibm.com/support/pages/node/6526488 · Vendor Advisory

Lỗ hổng khác của cloud pak for automation

• CVE-2021-29872TRUNG BÌNH 5.4IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by impr…
• CVE-2021-29775TRUNG BÌNH 5.4IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scri…
• CVE-2021-20482CAO 7.1IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML dat…
• CVE-2021-20359TRUNG BÌNH 6.5IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive informat…
• CVE-2021-20358TRUNG BÌNH 6.5IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This i…