Advisories · Technology

IBM Business Automation Workflow.

Every CVE that names IBM Business Automation Workflow among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-1495 CVE record

CVSS 4.3 Medium

IBM Business Automation Workflow missing authentication
- IBM Business Automation Workflow
- Authentication bypass
Not analysed yet 3 May 2025
CVE-2024-54179 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow cross-site scripting
- IBM Business Automation Workflow
- IBM Business Automation Workflow Enterprise Service Bus
- Cross-site scripting (XSS)
Not analysed yet 3 Mar 2025
CVE-2024-43188 CVE record

CVSS 4.9 Medium

IBM Business Automation Workflow improper input validation
- IBM Business Automation Workflow
- CWE-602
Not analysed yet 18 Sept 2024
CVE-2024-38321 CVE record

CVSS 5.3 Medium

IBM Business Automation Workflow information disclosure
- IBM Business Automation Workflow
- Information disclosure
Not analysed yet 3 Aug 2024
CVE-2023-50947 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow cross-site scripting
- IBM Business Automation Workflow
- Cross-site scripting (XSS)
Not analysed yet 4 Feb 2024
CVE-2023-32339 CVE record

CVSS 6.1 Medium

IBM Business Automation Workflow cross-site scripting
- IBM Business Automation Workflow
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2023
CVE-2023-24957 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow cross-site scripting
- IBM Business Automation Workflow
- Cross-site scripting (XSS)
Not analysed yet 6 May 2023
CVE-2022-42435 CVE record

CVSS 4.3 Medium

IBM Business Automation Workflow cross-site request forgery
- IBM Business Automation Workflow
- Cross-site request forgery (CSRF)
Not analysed yet 3 Jan 2023
CVE-2022-38390 CVE record

CVSS 5.4 Medium

Cross-site scripting in IBM Business Automation Workflow
- IBM Business Automation Workflow
- Cross-site scripting (XSS)
Not analysed yet 17 Nov 2022
CVE-2022-35279 CVE record

CVSS 4.3 Medium

Cleartext storage of sensitive information in IBM Business Automation Workflow
- IBM Business Automation Workflow
- Information disclosure
Not analysed yet 3 Nov 2022
CVE-2022-22361 CVE record

CVSS 4.3 Medium

IBM Business Process Manager: IBM Business Automation Workflow traditional 21.0.1 through 21.0.3…
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 31 May 2022
CVE-2021-39046 CVE record

CVSS 4.9 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0, 19.0, 20.0…
- IBM Business Automation Workflow
- IBM Business Process Manager
Not analysed yet 18 Mar 2022
CVE-2021-38900 CVE record

CVSS 4.9 Medium

IBM Business Automation Workflow: IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Automation Workflow
- IBM Cloud Pak for Automation
Not analysed yet 21 Dec 2021
CVE-2021-38883 CVE record

CVSS 5.4 Medium

IBM Business Process Manager: IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 17 Dec 2021
CVE-2021-29753 CVE record

CVSS 5.9 Medium

IBM Business Automation Workflow 18.
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 5 Nov 2021
CVE-2021-29835 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting.
- IBM Business Automation Workflow
Not analysed yet 22 Oct 2021
CVE-2021-29878 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting.
- IBM Business Automation Workflow
Not analysed yet 18 Oct 2021
CVE-2021-29834 CVE record

CVSS 6.4 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2…
- IBM Business Automation Workflow
- IBM Business Process Manager
Not analysed yet 29 Sept 2021
CVE-2021-29775 CVE record

CVSS 6.4 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation…
- IBM Business Automation Workflow
- IBM Cloud Pak for Automation
Not analysed yet 28 Jun 2021
CVE-2021-29751 CVE record

CVSS 3.1 Low

IBM Business Process Manager: IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 28 Jun 2021
CVE-2020-4768 CVE record

CVSS 4.4 Medium

IBM Business Automation Workflow: IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Automation Workflow
- IBM Case Manager
Not analysed yet 11 Feb 2021
CVE-2020-4794 CVE record

CVSS 5.4 Medium

IBM Automation Workstream Services: IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2…
- IBM Automation Workstream Services
- IBM Business Process Manager
Not analysed yet 21 Dec 2020
CVE-2020-4900 CVE record

CVSS 5.1 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log…
- IBM Business Automation Workflow
Not analysed yet 30 Nov 2020
CVE-2020-4672 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting.
- IBM Business Automation Workflow
Not analysed yet 16 Nov 2020
CVE-2020-4531 CVE record

CVSS 5.3 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Automation Workflow
- IBM Business Process Manager
Not analysed yet 25 Sept 2020
CVE-2020-4530 CVE record

CVSS 5.4 Medium

IBM Business Process Manager: IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5…
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 15 Sept 2020
CVE-2020-4698 CVE record

CVSS 6.4 Medium

IBM Business Process Manager: IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 8 Sept 2020
CVE-2020-4516 CVE record

CVSS 5.4 Medium

IBM Business Process Manager: IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 8 Sept 2020
CVE-2020-4557 CVE record

CVSS 5.4 Medium

IBM Business Process Manager: IBM Business Automation Workflow 18.0, 19.0…
- IBM Business Process Manager
- IBM Business Automation Workflow
Not analysed yet 29 Jun 2020
CVE-2020-4490 CVE record

CVSS 5.3 Medium

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw.
- IBM Business Process Manager Advanced
- IBM Business Automation Workflow
Not analysed yet 29 May 2020
CVE-2020-4446 CVE record

CVSS 4.3 Medium

IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insuf…
- IBM Business Process Manager Standard
- IBM Business Automation Workflow
Not analysed yet 6 May 2020
CVE-2019-4669 CVE record

CVSS 6.3 Medium

IBM Business Automation Workflow: IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06…
- IBM Business Automation Workflow
- IBM Business Process Manager
Not analysed yet 27 Feb 2020
CVE-2019-4426 CVE record

CVSS 5.4 Medium

The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting.
- IBM Business Automation Workflow
- IBM Case Manager
Not analysed yet 13 Dec 2019
CVE-2019-4149 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process…
- IBM Business Automation Workflow
- IBM Business Process Manager
Not analysed yet 5 Sept 2019
CVE-2019-4424 CVE record

CVSS 7.1 High

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1…
- IBM Business Automation Workflow
Not analysed yet 20 Aug 2019
CVE-2019-4425 CVE record

CVSS 5.7 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1…
- IBM Business Automation Workflow
Not analysed yet 20 Aug 2019
CVE-2019-4410 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2…
- IBM Business Automation Workflow
Not analysed yet 1 Jul 2019
CVE-2019-4204 CVE record

CVSS 5.4 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2…
- IBM Business Automation Workflow
Not analysed yet 10 May 2019
CVE-2019-4045 CVE record

CVSS 4.3 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1…
- IBM Business Automation Workflow
Not analysed yet 8 Apr 2019
CVE-2018-2000 CVE record

CVSS 4.3 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site…
- IBM Business Automation Workflow
Not analysed yet 8 Apr 2019
CVE-2018-1999 CVE record

CVSS 4.3 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1…
- IBM Business Automation Workflow
Not analysed yet 8 Apr 2019
CVE-2018-1997 CVE record

CVSS 4.3 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1…
- IBM Business Automation Workflow
Not analysed yet 8 Apr 2019
CVE-2018-1885 CVE record

CVSS 5.3 Medium

IBM Business Automation Workflow: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1…
- IBM Business Automation Workflow
Not analysed yet 8 Apr 2019
CVE-2018-1848 CVE record

CVSS 6.1 Medium

IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting.
- IBM Business Automation Workflow
Not analysed yet 14 Dec 2018