BA
Product
Business Automation Workflow traditional with Process Federation Server
54
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 47Low 1
Watch
Add Business Automation Workflow traditional with Process Federation Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-42435 | 8.8 | Jan 4 | IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request… Affected: 18.0.0; 18.0.1; 18.0.2; 19.0.1; 19.0.2; 19.0.3; +34 more |
| CVE-2018-2000 | 8.8 | Apr 8 | IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 18.0.0.0; 18.0.0.1 |
| CVE-2018-1674 | 8.8 | Sep 20 | IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection Affected: 18.0.0.0; 18.0.0.1 |
| CVE-2019-4424 | 8.2 | Aug 20 | IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 18.0.0.0 through 19.0.0.2 |
| CVE-2022-43864 | 7.5 | Jan 26 | IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system Affected: 21.0.1 through 21.0.3.1; 20.0.0.1; 20.0.0.2; 22.0.1; 22.0.2 |
| CVE-2025-13096 | 7.1 | Feb 2 | XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - Affected: V25.0.0 through V25.0.0-IF002; V24.0.1 through V24.0.1-IF005; V24.0.0 through V24.0.0-IF007 |
Showing 6