VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 31, 2022· Updated Jun 17, 2026

CVE-2022-22361

CVE-2022-22361

Description

IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through 19.0.0.3, 18.0.0.0 through 18.0.0.1, IBM Business Automation Workflow containers V21.0.1 - V21.0.3 20.0.0.1 through 20.0.0.2, IBM Business Process Manager 8.6.0.0 through 8.6.0.201803, and 8.5.0.0 through 8.5.0.201706 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • IBM/Business Automation Workflowllm-fuzzy7 versions
    21.0.1 - 21.0.3, 20.0.0.1 - 20.0.0.2, 19.0.0.1 - 19.0.0.3, 18.0.0.0 - 18.0.0.1+ 6 more
    • (no CPE)range: 21.0.1 - 21.0.3, 20.0.0.1 - 20.0.0.2, 19.0.0.1 - 19.0.0.3, 18.0.0.0 - 18.0.0.1
    • cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:*:*:*:*range: >=19.0.0.1,<=19.0.0.3
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:*:*:*:*
    • (no CPE)range: 18.0.0.0
  • IBM/Business Automation Workflow containersllm-create
    Range: V21.0.1 - V21.0.3, 20.0.0.1 - 20.0.0.2
  • IBM/Business Process Managerllm-fuzzy3 versions
    8.6.0.0 - 8.6.0.201803, 8.5.0.0 - 8.5.0.201706+ 2 more
    • (no CPE)range: 8.6.0.0 - 8.6.0.201803, 8.5.0.0 - 8.5.0.201706
    • cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*range: >=8.5.0.0,<=8.5.0.201706
    • (no CPE)range: 8.6.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.