5.7
Medium
CVE-2019-4425 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive…
Description
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting links that would be clicked on by unsuspecting users. IBM X-Force ID: 162771.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Business Automation Workflow 18.0 | 18.0.0.0 → 18.0.0.2 | No fix stated |
Other CVEs of Business Automation Workflow
The 42 CVEs of Business Automation Workflow →
CVE-2024-54179
IBM Business Automation Workflow and IBM Business Automation Workflow Enterprise Service Bus 24.0.0, 24.0.1 and…
5.4
Medium
CVE-2024-43188
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform…
4.9
Medium
CVE-2024-38321
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log…
5.3
Medium
CVE-2023-50947
IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting
5.4
Medium