CVSS 9.8 · Critical EPSS 0,77%
Kerentanan Improper Neutralization of Formula Elements in a CSV File pada ibm cloud pak for business automation. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 259354.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | cloud pak for business automation | Versi 18.0.0 |
| ibm | cloud pak for business automation | Versi 18.0.1 |
| ibm | cloud pak for business automation | Versi 18.0.2 |
| ibm | cloud pak for business automation | Versi 19.0.1 |
| ibm | cloud pak for business automation | Versi 19.0.2 |
| ibm | cloud pak for business automation | Versi 19.0.3 |
| ibm | cloud pak for business automation | Versi 20.0.1 |
| ibm | cloud pak for business automation | Versi 20.0.2 |
| ibm | cloud pak for business automation | Versi 20.0.3 |
| ibm | cloud pak for business automation | Versi 21.0.1 |
| ibm | cloud pak for business automation | Versi 21.0.2 |
| ibm | cloud pak for business automation | Versi 21.0.3 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_001 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_002 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_003 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_004 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_005 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_006 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_007 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_008 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_009 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_010 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_011 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_012 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_013 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_014 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_015 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_016 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_017 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_018 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_019 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_020 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_021 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_022 |
| ibm | cloud pak for business automation | Versi 21.0.3 interim_fix_023 |
| ibm | cloud pak for business automation | Versi 22.0.1 |
| ibm | cloud pak for business automation | Versi 22.0.2 |
| ibm | cloud pak for business automation | Versi 23.0.1 |
| ibm | cloud pak for business automation | Versi 23.0.1 interim_fix_001 |