Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.2:*:*:*:*:*:*:*

part: a version: 19.0.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBusiness Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39046 vulnerable 2026-06-08 05:33:48.815635 Details available
MEDIUM (4.9)
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346.
Published: 2022-03-18T15:40:16.124Z
Updated: 2024-09-16T22:02:31.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38883 vulnerable 2026-06-08 05:33:48.485550 Details available
MEDIUM (5.4)
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209165.
Published: 2021-12-17T17:05:11.690Z
Updated: 2024-09-16T19:25:14.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29878 vulnerable 2026-06-08 05:31:27.186953 Details available
MEDIUM (5.4)
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 206581.
Published: 2021-10-18T16:35:11.354Z
Updated: 2024-09-17T01:36:37.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29834 vulnerable 2026-06-08 05:31:27.069219 Details available
MEDIUM (6.4)
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204832.
Published: 2021-09-29T15:55:11.692Z
Updated: 2024-09-17T01:56:18.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4698 vulnerable 2026-06-08 05:26:40.779008 Details available
MEDIUM (6.4)
IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186841.
Published: 2020-09-08T14:30:24.573Z
Updated: 2024-09-17T00:42:27.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4516 vulnerable 2026-06-08 05:25:59.442837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.