Business Automation Workflow (Ibm) - vulnerabilities (CVEs)

54 CVEs, 0 in the last 30 days, 232 known versions, newest CVE from 2026-08-05. Vendor: Ibm.

CVEs of Business Automation Workflow

CVE-2026-12730 - CVSS 3.8 (low), 2026-08-05: IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0…
CVE-2026-1248 - CVSS 4.3 (medium), 2026-05-27: IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.
CVE-2025-13096 - CVSS 7.1 (high), 2026-02-02: IBM Business Automation Workflow containers V25.0.0 through V25.0.0-IF007, V24.0.1 - V24.0.1-IF007, V24.0.0 - V24.0.0-IF007 and IBM Business Automation…
CVE-2025-36059 - CVSS 5.5 (medium), 2026-01-20: IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim…
CVE-2025-36058 - CVSS 5.5 (medium), 2026-01-20: IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim…
CVE-2025-36054 - CVSS 6.1 (medium), 2025-11-06: IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation…
CVE-2025-1495 - CVSS 4.3 (medium), 2025-05-03: IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation.
CVE-2024-54179 - CVSS 5.4 (medium), 2025-03-03: IBM Business Automation Workflow and IBM Business Automation Workflow Enterprise Service Bus 24.0.0, 24.0.1 and earlier unsupported versions are vulnerable to…
CVE-2024-43188 - CVSS 4.9 (medium), 2024-09-18: IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client…
CVE-2024-38321 - CVSS 6.5 (medium), 2024-08-03: IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations that could…
CVE-2023-50947 - CVSS 5.4 (medium), 2024-02-04: IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2023-32339 - CVSS 6.1 (medium), 2023-06-27: IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2023-24957 - CVSS 5.4 (medium), 2023-05-06: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is…
CVE-2022-43864 - CVSS 7.5 (high), 2023-01-26: IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL…
CVE-2022-42435 - CVSS 8.8 (high), 2023-01-04: IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to…
CVE-2022-41735 - CVSS 6.1 (medium), 2022-12-07: IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This…
CVE-2022-38390 - CVSS 5.4 (medium), 2022-11-17: Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
CVE-2022-35279 - CVSS 4.3 (medium), 2022-11-03: "IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose…
CVE-2022-22361 - CVSS 6.5 (medium), 2022-05-31: IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through 19.0.0.3, 18.0.0.0 through 18.0.0.1, IBM…
CVE-2021-39046 - CVSS 4.9 (medium), 2022-03-18: IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can…
CVE-2021-38900 - CVSS 6.5 (medium), 2021-12-21: IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly…
CVE-2021-38893 - CVSS 6.4 (medium), 2021-12-21: IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This…
CVE-2021-38883 - CVSS 5.4 (medium), 2021-12-17: IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This…
CVE-2021-29753 - CVSS 5.9 (medium), 2021-11-05: IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an…
CVE-2021-29835 - CVSS 6.1 (medium), 2021-10-22: IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2021-29878 - CVSS 5.4 (medium), 2021-10-18: IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2021-29834 - CVSS 6.4 (medium), 2021-09-29: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager…
CVE-2021-29775 - CVSS 6.4 (medium), 2021-06-28: IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This…
CVE-2021-29751 - CVSS 4.3 (medium), 2021-06-28: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive…
CVE-2020-4768 - CVSS 5.4 (medium), 2021-02-11: IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users…
CVE-2020-4794 - CVSS 5.4 (medium), 2020-12-21: IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could…
CVE-2020-4900 - CVSS 5.5 (medium), 2020-11-30: IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 190991.
CVE-2020-4672 - CVSS 5.4 (medium), 2020-11-16: IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2020-4531 - CVSS 5.3 (medium), 2020-09-25: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obtain sensitive…
CVE-2020-4530 - CVSS 5.4 (medium), 2020-09-15: IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulnerability allows…
CVE-2020-4698 - CVSS 6.4 (medium), 2020-09-08: IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scripting. This…
CVE-2020-4516 - CVSS 5.4 (medium), 2020-09-08: IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability…
CVE-2020-4557 - CVSS 5.4 (medium), 2020-06-29: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability…
CVE-2020-4532 - CVSS 5.3 (medium), 2020-06-17: IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote…
CVE-2020-4490 - CVSS 6.1 (medium), 2020-05-29: IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions,…
CVE-2020-4446 - CVSS 4.3 (medium), 2020-05-06: IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security…
CVE-2019-4669 - CVSS 6.3 (medium), 2020-02-27: IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through…
CVE-2019-4426 - CVSS 5.4 (medium), 2019-12-13: The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting. This…
CVE-2019-4149 - CVSS 5.4 (medium), 2019-09-05: IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.03, V8.5.7.0…
CVE-2019-4424 - CVSS 8.2 (high), 2019-08-20: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when…
CVE-2019-4425 - CVSS 5.7 (medium), 2019-08-20: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting…
CVE-2019-4410 - CVSS 5.4 (medium), 2019-07-01: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
CVE-2019-4204 - CVSS 5.4 (medium), 2019-05-10: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
CVE-2019-4045 - CVSS 4.3 (medium), 2019-04-08: IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a…
CVE-2018-1999 - CVSS 4.3 (medium), 2019-04-08: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid…
CVE-2018-1997 - CVSS 6.5 (medium), 2019-04-08: IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated…
CVE-2018-1885 - CVSS 5.3 (medium), 2019-04-08: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially…
CVE-2018-2000 - CVSS 8.8 (high), 2019-04-08: IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
CVE-2018-1848 - CVSS 6.1 (medium), 2018-12-14: IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
CVE-2018-1674 - CVSS 8.8 (high), 2018-09-20: IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL…