VendorsIBMbusiness_automation_workflow20.0.0.2
Vulnerabilities

IBM Business Automation Workflow 20.0.0.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2022-43864
IBM Business Automation Workflow information disclosure
Published 2023-01-25 · Modified
7.5EPSS 0.020
CVE-2024-38321
IBM Business Automation Workflow information disclosure
Published 2024-08-03 · Analyzed
6.5EPSS 0.004
CVE-2022-22361
IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through 19.0.0.3, 18.0.0.0 through 18.0.0.1, IBM Business Automation Workflow containers V21.0.1 - V21.0.3 20.0.0.1 through 20.0.0.2, IBM Business Process Manager 8.6.0.0 through 8.6.0.201803, and 8.5.0.0 through 8.5.0.201706 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published 2022-05-31 · Modified
6.5EPSS 0.003
CVE-2021-29834
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204832.
Published 2021-09-29 · Modified
6.4EPSS 0.005
CVE-2022-41735
IBM Business Process Manager cross-site scripting
Published 2022-12-07 · Modified
6.1EPSS 0.004
CVE-2021-29878
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 206581.
Published 2021-10-18 · Modified
5.4EPSS 0.005
CVE-2021-38883
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209165.
Published 2021-12-17 · Modified
5.4EPSS 0.005
CVE-2023-50947
IBM Business Automation Workflow cross-site scripting
Published 2024-02-04 · Modified
5.4EPSS 0.004
CVE-2022-38390
Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 233978.
Published 2022-11-17 · Modified
5.4EPSS 0.004
CVE-2023-24957
IBM Business Automation Workflow cross-site scripting
Published 2023-05-06 · Modified
5.4EPSS 0.004
CVE-2021-39046
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346.
Published 2022-03-18 · Modified
4.9EPSS 0.009
CVE-2024-43188
IBM Business Automation Workflow improper input validation
Published 2024-09-18 · Analyzed
4.9EPSS 0.003
CVE-2022-35279
"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."
Published 2022-11-03 · Modified
4.3EPSS 0.003