Vulnerability Details CVE-2023-35899
IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 259354.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.8%
CVSS Severity
CVSS v3 Score 7.0
References
Products affected by CVE-2023-35899
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.0
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.2
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.2
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.3
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.2
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.3
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:23.0.1