WebSphere Automation vulnerabilities

2 known vulnerabilities in WebSphere Automation from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WebSphere Automation: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-54181Dec 30, 2024IBMEPSS 1%

  IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.

• 7.8 High severity

  WebSphere Automation: Improper Neutralization of Formula Elements in a CSV File

  CVE-2024-28764May 1, 2024IBM

  IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623.