IB
Product
IBM Business Automation Workflow
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 28Low 1
Watch
Add IBM Business Automation Workflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-35899 | 9.8 | Mar 21 | IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV… Affected: 18.0.0; 18.0.1; 18.0.2; 19.0.1; 19.0.2; 19.0.3; +33 more |
| CVE-2025-36094 | 8.1 | Feb 3 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. Affected: 25.0.0 through 25.0.0 Interim Fix 002; 24.0.1 through 24.0.1 Interim Fix 005; 24.0.0 through 24.0.0 Interim Fix 007 |
| CVE-2023-35024 | 7.6 | Oct 14 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to… Affected: 18.0.0; 18.0.1; 18.0.2; 19.0.1; 19.0.2; 19.0.3; +8 more |
| CVE-2025-36093 | 7.4 | Nov 3 | security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025. Affected: 25.0.0; 24.0.1; 24.0.0 |
| CVE-2021-29859 | 6.8 | May 2 | IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through… Affected: 21.0.1; 21.0.1; 21.0.1; 21.0.1; 21.0.1; 21.0.1; +21 more |
| CVE-2026-11864 | 6.5 | Sep 15 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. Affected: 26.0.0 through 26.0.0 Interim Fix 001; 25.0.0 through 25.0.0 Interim Fix 005; 24.0.1 through 24.0.1 Interim Fix 008; 24.0.0 through 24.0.0 Interim Fix 009 |
| CVE-2026-12759 | 6.5 | Sep 14 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. Affected: 26.0.0 through 26.0.0 Interim Fix 001; 25.0.0 through 25.0.0 Interim Fix 005; 24.0.1 through 24.0.1 Interim Fix 008; 24.0.0 through 24.0.0 Interim Fix 009 |
| CVE-2025-36092 | 6.5 | Nov 3 | IBM Business Automation Insights improper input validation Affected: 25.0.0; 24.0.1; 24.0.0 |
| CVE-2025-36023 | 6.5 | Aug 8 | IBM Cloud Pak for Business Automation security bypass Affected: 24.0.0 through 24.0.0 IF005; 24.0.1 through 24.0.1 IF002 |
| CVE-2025-1838 | 6.5 | May 3 | IBM Cloud Pak for Business Automation denial of service Affected: 24.0.1 through 24.0.1 IF001; 24.0.0 through 24.0.0 IF004 |
| CVE-2024-49348 | 6.5 | Feb 5 | IBM Cloud Pak for Business Automation incorrect privilege assignment Affected: 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2 |
| CVE-2023-50959 | 6.5 | Mar 31 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1,2 2.0.2, 23.0.1, and 23.0.2 may allow… Affected: 18.0.0; 18.0.1; 18.0.2; 19.0.1; 19.0.2; 19.0.3; +10 more |
| CVE-2023-38367 | 6.5 | Feb 29 | IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1,… Affected: 18.0.0; 18.0.1; 18.0.2; 19.0.1; 19.0.2; 19.0.3; +34 more |
| CVE-2026-81859 | 6.2 | Sep 4 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. Affected: 26.0.0 through 26.0.0 Interim Fix 001; 25.0.0 through 25.0.0 Interim Fix 005; 24.0.1 through 24.0.1 Interim Fix 008; 24.0.0 through 24.0.0 Interim Fix 009 |
| CVE-2024-41753 | 6.1 | May 3 | IBM Cloud Pak for Business Automation cross-site scripting Affected: 24.0.0 through 24.0.0 IF004; 24.0.1 through 24.0.1 IF001 |
| CVE-2023-32339 | 6.1 | Jun 27 | IBM Business Automation Workflow is vulnerable to cross-site scripting Affected: 18.0.0; 18.0.2; 19.0.1; 19.0.3; 20.0.1; 20.0.3; +34 more |
| CVE-2026-12749 | 5.4 | Sep 15 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. Affected: 26.0.0 through 26.0.0 Interim Fix 001; 25.0.0 through 25.0.0 Interim Fix 005; 24.0.1 through 24.0.1 Interim Fix 008; 24.0.0 through 24.0.0 Interim Fix 009 |
| CVE-2026-12750 | 5.4 | Sep 15 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. Affected: 26.0.0 through 26.0.0 Interim Fix 001; 25.0.0 through 25.0.0 Interim Fix 005; 24.0.1 through 24.0.1 Interim Fix 008; 24.0.0 through 24.0.0 Interim Fix 009 |
| CVE-2026-12751 | 5.4 | Sep 15 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. Affected: 26.0.0 through 26.0.0 Interim Fix 001; 25.0.0 through 25.0.0 Interim Fix 005; 24.0.1 through 24.0.1 Interim Fix 008; 24.0.0 through 24.0.0 Interim Fix 009 |
| CVE-2026-12758 | 5.4 | Sep 14 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. Affected: 26.0.0 through 26.0.0 Interim Fix 001; 25.0.0 through 25.0.0 Interim Fix 005; 24.0.1 through 24.0.1 Interim Fix 008; 24.0.0 through 24.0.0 Interim Fix 009 |
| CVE-2025-36436 | 5.4 | Feb 2 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. Affected: 25.0.0 through 25.0.0 Interim Fix 002; 24.0.1 through 24.0.1 Interim Fix 005; 24.0.0 through 24.0.0 Interim Fix 007 |
| CVE-2025-36172 | 5.4 | Nov 3 | Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002 Affected: 25.0.0 through 25.0.0 Interim Fix 001; 24.0.1 through 24.0.1 Interim Fix 004; 24.0.0 through 24.0.0 Interim Fix 006 |
| CVE-2024-52365 | 5.4 | Feb 5 | IBM Cloud Pak for Business Automation cross-site scripting Affected: 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2 |
| CVE-2024-52364 | 5.4 | Feb 5 | IBM Cloud Pak for Business Automation cross-site scripting Affected: 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2 |
| CVE-2024-37528 | 5.4 | Jul 8 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 is… Affected: 18.0.0 through 18.0.2; 19.0.1 through 19.0.3; 20.0.1 through 20.0.3; 21.0.1; 21.0.1; 21.0.1; +34 more |
| CVE-2023-50947 | 5.4 | Feb 4 | IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting Affected: 18.0.0 through 18.0.2; 19.0.1 through 19.0.3; 20.0.1 through 20.0.3; 21.0.1; 21.0.3; 21.0.3; +30 more |
| CVE-2023-22860 | 5.4 | Feb 27 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to stored… Affected: 18.0.0; 18.0.2; 19.0.1; 19.0.3; 20.0.1; 20.0.3; +34 more |
| CVE-2026-12762 | 5.3 | Aug 5 | Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights Affected: 24.0.0; 24.0.1; 25.0.0; 26.0.0 |
| CVE-2023-40691 | 4.9 | Dec 18 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive… Affected: 18.0.0; 18.0.2; 19.0.1; 19.0.3; 20.0.1; 20.0.3; +34 more |
| CVE-2025-36091 | 4.3 | Nov 3 | IBM Business Automation Insights unverified ownership Affected: 25.0.0; 24.0.1; 24.0.0 |
| CVE-2025-1495 | 4.3 | May 3 | IBM Business Automation Workflow missing authentication Affected: 24.0.1 through 24.0.1 IF001; 24.0.0 |
| CVE-2024-31897 | 4.3 | Jul 8 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable… Affected: 18.0.0 through 18.0.2; 19.0.1 through 19.0.3; 20.0.1 through 20.0.3; 21.0.1; 21.0.1; 21.0.1; +34 more |
| CVE-2023-23469 | 3.3 | Feb 1 | IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be… Affected: 18.0.0 through 20.0.3; 21.0.1; 21.0.1; 21.0.1; 21.0.1; 21.0.1; +24 more |
Showing 33