BA
Product
Business Automation Workflow traditional with Process Federation Server
55
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 48Low 1
Watch
Add Business Automation Workflow traditional with Process Federation Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-42435 | 8.8 | Jan 3 | IBM Business Automation Workflow cross-site request forgery Affected: 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1 |
| CVE-2018-2000 | 8.8 | Apr 8 | IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 18.0.0.0; 18.0.0.1 |
| CVE-2018-1674 | 8.8 | Sep 20 | IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection Affected: 18.0.0.0; 18.0.0.1 |
| CVE-2019-4424 | 8.2 | Aug 20 | IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 18.0.0.0 through 19.0.0.2 |
| CVE-2022-43864 | 7.5 | Jan 25 | IBM Business Automation Workflow information disclosure Affected: 21.0.1 through 21.0.3.1; 20.0.0.1; 20.0.0.2; 22.0.1; 22.0.2 |
| CVE-2025-13096 | 7.1 | Feb 2 | XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - Affected: V25.0.0 through V25.0.0-IF002; V24.0.1 through V24.0.1-IF005; V24.0.0 through V24.0.0-IF007 |
Showing 6