What’s Vulnerable › Vulnerabilities

CVE-2022-43901: IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-01 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components. IBM X-Force ID: 240829.

Affected products

• IBM WebSphere Automation for Cloud Pak for Watson AIOps: before 1.4.3 — fixed in 1.4.3

How to fix

Upgrade to a fixed version: IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.3. Check the vendor advisory for mitigations.

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/240829
• https://www.ibm.com/support/pages/node/6842605
• https://exchange.xforce.ibmcloud.com/vulnerabilities/240829
• https://www.ibm.com/support/pages/node/6842605

Get alerted when CVE-2022-43901 or the next vulnerability affects your stack