IBM Business Automation Workflow 24.0.1 Containers Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*
part: a version: 24.0.1 update: -
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Business Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350) |
| Edition | * |
| Language | * |
| Software edition | containers |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36059 |
vulnerable | 2026-06-08 07:21:00.804728 |
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
MEDIUM (4.7)
IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a local user with access to the container to execute OS system calls.
Published: 2026-01-20T15:07:46.448Z
Updated: 2026-01-20T15:54:41.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36058 |
vulnerable | 2026-06-08 07:21:00.798222 |
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
MEDIUM (5.5)
IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map.
Published: 2026-01-20T15:09:07.082Z
Updated: 2026-01-20T15:53:20.326Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36054 |
vulnerable | 2026-06-08 07:21:00.766212 |
Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -
MEDIUM (6.1)
IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-06T14:11:49.396Z
Updated: 2025-11-06T14:32:53.254Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1495 |
vulnerable | 2026-06-08 07:08:37.116162 |
IBM Business Automation Workflow missing authentication
MEDIUM (4.3)
IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation.
Published: 2025-05-03T16:53:00.666Z
Updated: 2025-08-28T14:28:22.723Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.