IBM Business Automation Workflow 21.0.3.1 Traditional Edition

CPE Details

IBM Business Automation Workflow 21.0.3.1 Traditional Edition
ibm
business_automation_workflow
21.0.3.1
2023-05-12
13h08 +00:00
2023-06-23
12h43 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:business_automation_workflow:21.0.3.1:*:*:*:traditional:*:*:*

Informations

Vendor

ibm

Product

business_automation_workflow

Version

21.0.3.1

Software Edition

traditional

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-43188 2024-09-18 11h39 +00:00 IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.
4.9
Moyen
CVE-2023-50947 2024-02-04 00h11 +00:00 IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.
5.4
Moyen
CVE-2023-24957 2023-05-06 02h05 +00:00 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246115.
5.4
Moyen
CVE-2022-43864 2023-01-25 18h07 +00:00 IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 239427.
7.5
Haute
CVE-2022-41735 2022-12-07 16h40 +00:00 IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 65687.
6.1
Moyen
CVE-2022-38390 2022-11-17 16h48 +00:00 Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 233978.
5.4
Moyen