IBM Business Automation Workflow 20.0.0.1 Traditional Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:*
part: a version: 20.0.0.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Business Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350) |
| Edition | * |
| Language | * |
| Software edition | traditional |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-43188 |
vulnerable | 2026-06-08 06:45:49.817407 |
IBM Business Automation Workflow improper input validation
MEDIUM (4.9)
IBM Business Automation Workflow
22.0.2, 23.0.1, 23.0.2, and 24.0.0
could allow a privileged user to perform unauthorized activities due to improper client side validation.
Published: 2024-09-18T11:39:22.958Z
Updated: 2024-09-18T16:40:53.717Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50947 |
vulnerable | 2026-06-08 06:16:17.072454 |
IBM Business Automation Workflow cross-site scripting
MEDIUM (5.4)
IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.
Published: 2024-02-04T00:11:02.465Z
Updated: 2024-08-22T17:41:47.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24957 |
vulnerable | 2026-06-08 05:56:08.263305 |
IBM Business Automation Workflow cross-site scripting
MEDIUM (5.4)
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246115.
Published: 2023-05-06T02:05:46.959Z
Updated: 2025-01-29T16:06:32.818Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43864 |
vulnerable | 2026-06-08 05:49:34.901024 |
IBM Business Automation Workflow information disclosure
HIGH (7.5)
IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 239427.
Published: 2023-01-25T18:07:21.454Z
Updated: 2025-03-31T14:34:16.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41735 |
vulnerable | 2026-06-08 05:48:30.886892 |
IBM Business Process Manager cross-site scripting
MEDIUM (5.4)
IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 65687.
Published: 2022-12-07T16:40:29.374Z
Updated: 2025-04-22T19:54:47.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38390 |
vulnerable | 2026-06-08 05:47:16.285724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35279 |
vulnerable | 2026-06-08 05:46:04.502600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.