Advisories · Technology
IBM Business Automation Workflow containers.
Every CVE that names IBM Business Automation Workflow containers among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -
- IBM Business Automation Workflow containers
- IBM Business Automation Workflow traditional
- Server-side request forgery (SSRF)
- CVSS 5.5 Medium
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
- IBM Business Automation Workflow containers
- Information disclosure
- CVSS 4.7 Medium
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
- IBM Business Automation Workflow containers
- Privilege escalation
- CVSS 6.1 Medium
Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -
- IBM Business Automation Workflow containers
- IBM Business Automation Workflow traditional with Process Federation Server
- Cross-site scripting (XSS)