Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:business_automation_workflow:22.0.1:-:*:*:containers:*:*:*

part: a version: 22.0.1 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBusiness Automation Workflow (0a6e7d33-cdef-59e8-95ad-fe584ceab350)
Edition*
Language*
Software editioncontainers
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41735 vulnerable 2026-06-08 05:48:30.897085 IBM Business Process Manager cross-site scripting
MEDIUM (5.4)
IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 65687.
Published: 2022-12-07T16:40:29.374Z
Updated: 2025-04-22T19:54:47.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35279 vulnerable 2026-06-08 05:46:04.513786 Details available
"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."
Published: 2022-11-03T00:00:00.000Z
Updated: 2025-05-02T20:22:24.213Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.