Skip to content

Known vulnerabilities in IBM Business Automation Workflow

Is your version affected?

CVE Summary Score Published
CVE-2020-4516 IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to… 5.4 Medium Sep 8, 2020
CVE-2020-4557 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to… 5.4 Medium Jun 29, 2020
CVE-2020-4490 IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote… 5.3 Medium May 29, 2020
CVE-2020-4446 IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote… 4.3 Medium May 6, 2020
CVE-2019-4669 IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business… 6.3 Medium Feb 27, 2020
CVE-2019-4426 The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable… 5.4 Medium Dec 13, 2019
CVE-2019-4149 IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through… 5.4 Medium Sep 5, 2019
CVE-2019-4424 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External… 7.1 High Aug 20, 2019
CVE-2019-4425 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive… 5.7 Medium Aug 20, 2019
CVE-2019-4410 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting 5.4 Medium Jul 1, 2019
CVE-2019-4204 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting 5.4 Medium May 10, 2019
CVE-2019-4045 IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded… 4.3 Medium Apr 8, 2019
CVE-2018-2000 IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow… 4.3 Medium Apr 8, 2019
CVE-2018-1999 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the… 4.3 Medium Apr 8, 2019
CVE-2018-1997 IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a… 4.3 Medium Apr 8, 2019
CVE-2018-1885 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain… 5.3 Medium Apr 8, 2019
CVE-2018-1848 IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting 6.1 Medium Dec 14, 2018

Other IBM products