VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Apr 8, 2019· Updated Jun 17, 2026

CVE-2018-1885

CVE-2018-1885

Description

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • IBM/Business Automation Workflowllm-fuzzy5 versions
    18.0.0.0, 18.0.0.1, and 18.0.0.2+ 4 more
    • (no CPE)range: 18.0.0.0, 18.0.0.1, and 18.0.0.2
    • (no CPE)range: 18.0.0.0
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.2:*:*:*:*:*:*:*
  • IBM/Business Process Manager9 versions
    cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*range: >=7.5.0.0,<=7.5.1.2
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2017.06:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf2018.03:*:*:*:*:*:*
  • IBM/Business Process Manager Enterprise Service Bus
    cpe:2.3:a:ibm:business_process_manager_enterprise_service_bus:8.6:*:*:*:*:*:*:*
  • IBM/Websphere Enterprise Service Bus
    cpe:2.3:a:ibm:websphere_enterprise_service_bus:*:*:*:*:*:*:*:*
    Range: >=7.0.0.0,<=7.5.1.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.