Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

IBM Business Automation Workflow

42 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2024-5417924.0.0 ; 24.0.1IBM Business Automation Workflow cross-site scriptingMEDIUM 5.40.3 %
CVE-2024-4318822.0.2, 23.0.1, 23.0.2, 24.0.0IBM Business Automation Workflow improper input validationMEDIUM 4.90.3 %
CVE-2024-3832122.0.2, 23.0.1, 23.0.2, 24.0.0IBM Business Automation Workflow information disclosureMEDIUM 6.50.4 %
CVE-2023-5094722.0.2, 23.0.1, 23.0.2IBM Business Automation Workflow cross-site scriptingMEDIUM 5.40.4 %
CVE-2023-3233919.0.0.1 – 19.0.0.3 ; 20.0.0.1 – 20.0.0.2 ; 21.0.1 – 21.0.3.1 ; …IBM Business Automation Workflow cross-site scriptingMEDIUM 6.10.5 %
CVE-2023-2495718.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, 22.0.2IBM Business Automation Workflow cross-site scriptingMEDIUM 5.40.4 %
CVE-2022-4243518.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1IBM Business Automation Workflow cross-site request forgeryHIGH 8.80.3 %
CVE-2022-3839022.0.1 ; 21.0.1 – < 21.0.3.1 ; 20.0.0.1 – < 20.0.0.2 ; …Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrarMEDIUM 5.40.4 %
CVE-2022-2236118.0.0.0 ; 18.0.0.1 ; 19.0.0.1 ; …IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through 19.0.0.3, 18.0.0.0 through 1MEDIUM 6.50.4 %
CVE-2021-3904618.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clMEDIUM 4.90.9 %
CVE-2021-3890018.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtMEDIUM 6.51.2 %
CVE-2021-3888319.0.0 ; 20.0.0 ; 21.0 ; …IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scriptiMEDIUM 5.40.5 %
CVE-2021-2975318.0 ; 19.0 ; 20.0 ; …IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentialMEDIUM 5.90.8 %
CVE-2021-2983518.0 ; 19.0 ; 20.0 ; …IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed MEDIUM 6.10.6 %
CVE-2021-2987818.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed MEDIUM 5.40.5 %
CVE-2021-2983418.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business MEDIUM 6.40.5 %
CVE-2021-2977518.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scriMEDIUM 6.40.9 %
CVE-2021-2975118.0 ; 19.0 ; 20.0IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtaMEDIUM 4.30.9 %
CVE-2020-476818.0 ; 19.0 ; 20.0IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerabMEDIUM 5.40.5 %
CVE-2020-479419.0 ; 20.0 ; 18.0IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process MaMEDIUM 5.40.8 %
CVE-2020-490019.0.0.3IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-FoMEDIUM 5.50.3 %
CVE-2020-467220.0.0.1IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScriMEDIUM 5.40.6 %
CVE-2020-453118.0 ; 19.0 ; 20.0IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obMEDIUM 5.31.4 %
CVE-2020-4530C.D.0IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulneMEDIUM 5.40.6 %
CVE-2020-469818.0 ; 19.0 ; 20.0IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scriptinMEDIUM 6.40.6 %
CVE-2020-451618.0 ; 19.0 ; 20.0IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. ThisMEDIUM 5.40.8 %
CVE-2020-455718.0 ; 19.0 ; 20.0IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. TMEDIUM 5.40.6 %
CVE-2020-449018.0.0.0 ; 19.0.0.0IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass securMEDIUM 6.10.9 %
CVE-2020-444618.0.0.0 ; 19.0.0.1IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass seMEDIUM 4.30.9 %
CVE-2019-466918.0.0.1 ; 19.0.0.3IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0MEDIUM 6.30.8 %
CVE-2019-442618.0.0.1 ; 19.0.0.2The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scriptiMEDIUM 5.40.7 %
CVE-2019-414918.0.0.0 ; 18.0.0.2IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.MEDIUM 5.40.7 %
CVE-2019-442418.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXEHIGH 8.22.4 %
CVE-2019-442518.0.0.0 ; 18.0.0.1 ; 18.0.0.2IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another useMEDIUM 5.71.2 %
CVE-2019-441018.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allowsMEDIUM 5.41.0 %
CVE-2019-420418.0.0.0 ; 18.0.0.1 ; 18.0.0.2 ; …IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allowsMEDIUM 5.40.9 %
CVE-2019-404518.0.0.0 ; 18.0.0.1 ; 18.0.0.2IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management featMEDIUM 4.30.9 %
CVE-2018-200018.0.0.0 ; 18.0.0.1IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute HIGH 8.80.8 %
CVE-2018-199918.0.0.0 ; 18.0.0.1 ; 18.0.0.2IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pagMEDIUM 4.31.0 %
CVE-2018-199718.0.0.0 ; 18.0.0.1 ; 18.0.0.2IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack.MEDIUM 6.51.4 %
CVE-2018-188518.0.0.0 ; 18.0.0.1 ; 18.0.0.2IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information usiMEDIUM 5.31.8 %
CVE-2018-184818.0.0.0 ; 18.0.0.1IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitMEDIUM 6.11.3 %