IBM Business Automation Workflow 24.0.0 interim fix 006 Containers Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*
part: a version: 24.0.0 update: if006
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Business Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350) |
| Edition | * |
| Language | * |
| Software edition | containers |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36059 |
vulnerable | 2026-06-08 07:21:00.804631 |
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
MEDIUM (4.7)
IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a local user with access to the container to execute OS system calls.
Published: 2026-01-20T15:07:46.448Z
Updated: 2026-01-20T15:54:41.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36058 |
vulnerable | 2026-06-08 07:21:00.798202 |
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
MEDIUM (5.5)
IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map.
Published: 2026-01-20T15:09:07.082Z
Updated: 2026-01-20T15:53:20.326Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36054 |
vulnerable | 2026-06-08 07:21:00.750662 |
Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -
MEDIUM (6.1)
IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-06T14:11:49.396Z
Updated: 2025-11-06T14:32:53.254Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13096 |
vulnerable | 2026-06-08 07:04:31.589834 |
XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -
HIGH (7.1)
IBM Business Automation Workflow containers V25.0.0 through V25.0.0-IF007, V24.0.1 - V24.0.1-IF007, V24.0.0 - V24.0.0-IF007 and IBM Business Automation Workflow traditional V25.0.0, V24.0.1, V24.0.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Published: 2026-02-02T20:56:48.318Z
Updated: 2026-02-03T15:39:59.140Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.