Medium severity4.3NVD Advisory· Published Apr 8, 2019· Updated Jun 17, 2026
CVE-2018-2000
CVE-2018-2000
Description
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154890.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
618.0.0.0 - 18.0.0.1+ 3 more
- (no CPE)range: 18.0.0.0 - 18.0.0.1
- (no CPE)range: 18.0.0.0
- cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf2017.12:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf2017.12:*:*:*:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf2018.03:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/107851nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/154890nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.