High severity7.1NVD Advisory· Published Mar 30, 2021· Updated Jun 17, 2026

CVE-2021-20482

Description

IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197504.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Cloud Pak For Automation2 versions
cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.2:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.2:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.3:interim_fix002:*:*:*:*:*:*
IBM/IBM Cloud Pak for Automationllm-fuzzy
Range: 20.0.2, 20.0.3 IF002
IBM/Cloud Pak For Business Automationcpe-rescue
Range: 20.0.2

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/197504nvdVDB EntryVendor Advisory
www.ibm.com/support/pages/node/6437577nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000