Skip to content

Known vulnerabilities in IBM Business Process Manager

Is your version affected?

CVE Summary Score Published
CVE-2022-41735 IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is… 5.4 Medium Dec 7, 2022
CVE-2022-22361 IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through… 4.3 Medium May 31, 2022
CVE-2021-39046 IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user… 4.9 Medium Mar 18, 2022
CVE-2021-38883 IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable… 5.4 Medium Dec 17, 2021
CVE-2021-29753 IBM Business Automation Workflow 18 5.9 Medium Nov 5, 2021
CVE-2021-29834 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and… 6.4 Medium Sep 29, 2021
CVE-2021-29751 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an… 3.1 Low Jun 28, 2021
CVE-2020-4794 IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM… 5.4 Medium Dec 21, 2020
CVE-2020-4531 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a… 5.3 Medium Sep 25, 2020
CVE-2020-4530 IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site… 5.4 Medium Sep 15, 2020
CVE-2020-4698 IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored… 6.4 Medium Sep 8, 2020
CVE-2020-4516 IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to… 5.4 Medium Sep 8, 2020
CVE-2020-4557 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to… 5.4 Medium Jun 29, 2020
CVE-2019-4669 IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business… 6.3 Medium Feb 27, 2020
CVE-2019-4149 IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through… 5.4 Medium Sep 5, 2019
CVE-2018-1674 IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection 6.3 Medium Sep 20, 2018
CVE-2018-1384 IBM Business Process Manager 8.6 is vulnerable to cross-site scripting 5.4 Medium Mar 30, 2018
CVE-2017-1756 IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system 4.0 Medium Mar 30, 2018
CVE-2017-1767 IBM Business Process Manager 8.6 is vulnerable to cross-site scripting 5.4 Medium Mar 30, 2018
CVE-2017-1766 Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he… 4.3 Medium Mar 30, 2018
CVE-2017-1765 IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive… 3.1 Low Mar 30, 2018
CVE-2017-1769 IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute… Not rated Jan 24, 2018
CVE-2017-1628 IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST… Not rated Nov 27, 2017

Other IBM products