CVE-2025-1838

Опубликовано: 03 мая 2025

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

IBM Cloud Pak for Business Automation

24.0.0 and 24.0.1 through 24.0.1 IF001

Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.

Ссылки

https://www.ibm.com/support/pages/node/7232429
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_001:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_002:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_003:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_004:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.1:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.1:interim_fix_001:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00073

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-602

Связанные уязвимости

GHSA-w4rj-x734-wm94