CVE-2021-20482: IBM Cloud Pak For Automation

High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197504.

Affected products

• IBM Cloud Pak For Automation: version 20.0.2 only; version 20.0.3 only

Published 2021-03-30. Last modified 2026-06-17.