IBM Business Automation Workflow 21.0.3 Interim Fix 010 Containers Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if010:*:*:containers:*:*:*
part: a version: 21.0.3 update: if010
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Business Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350) |
| Edition | * |
| Language | * |
| Software edition | containers |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38321 |
vulnerable | 2026-06-08 06:41:45.051575 |
IBM Business Automation Workflow information disclosure
MEDIUM (5.3)
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations that could be read by an authenticated user. IBM X-Force ID: 284868.
Published: 2024-08-03T13:34:16.845Z
Updated: 2024-08-03T18:49:24.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50947 |
vulnerable | 2026-06-08 06:16:17.079201 |
IBM Business Automation Workflow cross-site scripting
MEDIUM (5.4)
IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.
Published: 2024-02-04T00:11:02.465Z
Updated: 2024-08-22T17:41:47.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24957 |
vulnerable | 2026-06-08 05:56:08.268362 |
IBM Business Automation Workflow cross-site scripting
MEDIUM (5.4)
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246115.
Published: 2023-05-06T02:05:46.959Z
Updated: 2025-01-29T16:06:32.818Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41735 |
vulnerable | 2026-06-08 05:48:30.893113 |
IBM Business Process Manager cross-site scripting
MEDIUM (5.4)
IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 65687.
Published: 2022-12-07T16:40:29.374Z
Updated: 2025-04-22T19:54:47.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35279 |
vulnerable | 2026-06-08 05:46:04.511517 |
Details available
"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."
Published: 2022-11-03T00:00:00.000Z
Updated: 2025-05-02T20:22:24.213Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.