Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:business_automation_workflow:22.0.2:*:*:*:-:*:*:*

part: a version: 22.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBusiness Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-43188 vulnerable 2026-06-08 06:45:49.812346 IBM Business Automation Workflow improper input validation
MEDIUM (4.9)
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.
Published: 2024-09-18T11:39:22.958Z
Updated: 2024-09-18T16:40:53.717Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38321 vulnerable 2026-06-08 06:41:45.041214 IBM Business Automation Workflow information disclosure
MEDIUM (5.3)
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations that could be read by an authenticated user. IBM X-Force ID: 284868.
Published: 2024-08-03T13:34:16.845Z
Updated: 2024-08-03T18:49:24.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50947 vulnerable 2026-06-08 06:16:17.086294 IBM Business Automation Workflow cross-site scripting
MEDIUM (5.4)
IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.
Published: 2024-02-04T00:11:02.465Z
Updated: 2024-08-22T17:41:47.983Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.