VYPR

Business Automation Workflow

by IBM

CVEs (60)

  • CVE-2026-12742MedSep 15, 2026
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.00

    IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.

  • CVE-2024-54179MedMar 3, 2025
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.00

    IBM Business Automation Workflow and IBM Business Automation Workflow Enterprise Service Bus 24.0.0, 24.0.1 and earlier unsupported versions are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI…

  • CVE-2023-50947MedFeb 4, 2024
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.00

    IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…

  • CVE-2023-24957MedMay 6, 2023
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.00

    IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

  • CVE-2022-41735MedDec 7, 2022
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.00

    IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…

  • CVE-2022-38390MedNov 17, 2022
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.00

    Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…

  • CVE-2021-38893MedDec 21, 2021
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.01

    IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…

  • CVE-2021-38883MedDec 17, 2021
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.00

    IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…

  • CVE-2021-29878MedOct 18, 2021
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.01

    IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…

  • CVE-2021-29834MedSep 29, 2021
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.01

    IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…

  • CVE-2021-29775MedJun 28, 2021
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.01

    IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…

  • CVE-2020-4768MedFeb 11, 2021
    IBM
    Case Manager
    risk 0.35cvss 5.4epss 0.00

    IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…

  • CVE-2020-4794MedDec 21, 2020
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.01

    IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization…

  • CVE-2020-4672MedNov 16, 2020
    IBM
    Business Automation Workflow
    risk 0.35cvss 5.4epss 0.01

    IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…

  • CVE-2020-4531MedSep 25, 2020
    IBM
    Business Process Manager
    risk 0.35cvss 5.3epss 0.01

    IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further…

  • CVE-2020-4530MedSep 15, 2020
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.01

    IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…

  • CVE-2020-4698MedSep 8, 2020
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.01

    IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…

  • CVE-2020-4516MedSep 8, 2020
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.01

    IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading…

  • CVE-2020-4557MedJun 29, 2020
    IBM
    Business Process Manager
    risk 0.35cvss 5.4epss 0.01

    IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…

  • CVE-2020-4532MedJun 17, 2020
    IBM
    Business Process Manager
    risk 0.35cvss 5.3epss 0.01

    IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This…

Page 2 of 3