IBM Business Automation Workflow 25.0.0 Interim Fixes 002 Containers Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*
part: a version: 25.0.0 update: if002
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Business Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350) |
| Edition | * |
| Language | * |
| Software edition | containers |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36059 |
vulnerable | 2026-06-08 07:21:00.805174 |
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
MEDIUM (4.7)
IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a local user with access to the container to execute OS system calls.
Published: 2026-01-20T15:07:46.448Z
Updated: 2026-01-20T15:54:41.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36058 |
vulnerable | 2026-06-08 07:21:00.803159 |
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
MEDIUM (5.5)
IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map.
Published: 2026-01-20T15:09:07.082Z
Updated: 2026-01-20T15:53:20.326Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13096 |
vulnerable | 2026-06-08 07:04:31.626375 |
XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -
HIGH (7.1)
IBM Business Automation Workflow containers V25.0.0 through V25.0.0-IF007, V24.0.1 - V24.0.1-IF007, V24.0.0 - V24.0.0-IF007 and IBM Business Automation Workflow traditional V25.0.0, V24.0.1, V24.0.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Published: 2026-02-02T20:56:48.318Z
Updated: 2026-02-03T15:39:59.140Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.