Skip to content

Known vulnerabilities in IBM Business Automation Workflow

Is your version affected?

CVE Summary Score Published
CVE-2024-54179 IBM Business Automation Workflow and IBM Business Automation Workflow Enterprise Service Bus 24.0.0, 24.0.1 and… 5.4 Medium Mar 3, 2025
CVE-2024-43188 IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform… 4.9 Medium Sep 18, 2024
CVE-2024-38321 IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log… 5.3 Medium Aug 3, 2024
CVE-2023-50947 IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting 5.4 Medium Feb 4, 2024
CVE-2023-32339 IBM Business Automation Workflow is vulnerable to cross-site scripting 6.1 Medium Jun 27, 2023
CVE-2023-24957 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2,… 5.4 Medium May 6, 2023
CVE-2022-42435 IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2,… 4.3 Medium Jan 3, 2023
CVE-2022-38390 Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting 5.4 Medium Nov 17, 2022
CVE-2022-22361 IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through… 4.3 Medium May 31, 2022
CVE-2021-39046 IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user… 4.9 Medium Mar 18, 2022
CVE-2021-38900 IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a… 4.9 Medium Dec 21, 2021
CVE-2021-38883 IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable… 5.4 Medium Dec 17, 2021
CVE-2021-29753 IBM Business Automation Workflow 18 5.9 Medium Nov 5, 2021
CVE-2021-29835 IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting 5.4 Medium Oct 22, 2021
CVE-2021-29878 IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting 5.4 Medium Oct 18, 2021
CVE-2021-29834 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and… 6.4 Medium Sep 29, 2021
CVE-2021-29775 IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are… 6.4 Medium Jun 28, 2021
CVE-2021-29751 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an… 3.1 Low Jun 28, 2021
CVE-2020-4768 IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site… 4.4 Medium Feb 11, 2021
CVE-2020-4794 IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM… 5.4 Medium Dec 21, 2020
CVE-2020-4900 IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by… 5.1 Medium Nov 30, 2020
CVE-2020-4672 IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting 5.4 Medium Nov 16, 2020
CVE-2020-4531 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a… 5.3 Medium Sep 25, 2020
CVE-2020-4530 IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site… 5.4 Medium Sep 15, 2020
CVE-2020-4698 IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored… 6.4 Medium Sep 8, 2020

Other IBM products