IBM Business Automation Workflow 21.0.3 Interim Fix 017 Containers Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if017:*:*:containers:*:*:*
part: a version: 21.0.3 update: if017
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Business Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350) |
| Edition | * |
| Language | * |
| Software edition | containers |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38321 |
vulnerable | 2026-06-08 06:41:45.057088 |
IBM Business Automation Workflow information disclosure
MEDIUM (5.3)
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations that could be read by an authenticated user. IBM X-Force ID: 284868.
Published: 2024-08-03T13:34:16.845Z
Updated: 2024-08-03T18:49:24.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50947 |
vulnerable | 2026-06-08 06:16:17.083865 |
IBM Business Automation Workflow cross-site scripting
MEDIUM (5.4)
IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.
Published: 2024-02-04T00:11:02.465Z
Updated: 2024-08-22T17:41:47.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24957 |
vulnerable | 2026-06-08 05:56:08.272848 |
IBM Business Automation Workflow cross-site scripting
MEDIUM (5.4)
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246115.
Published: 2023-05-06T02:05:46.959Z
Updated: 2025-01-29T16:06:32.818Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.