Skip to content
Ibm Workflow vulnerabilities
-
ibm business automation workflow containers and traditional
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
CVE-2026-12742
5.4 Medium
-
ibm business automation workflow containers and traditional
Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
CVE-2026-12752
7.1 High
-
ibm business automation workflow containers and traditional
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
CVE-2026-12756
7.1 High
-
ibm business automation workflow containers and traditional
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
CVE-2026-13107
7.1 High
-
ibm business automation workflow containers and traditional, business automation workflow +1 more
Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers
CVE-2026-12730
3.8 Low
-
ibm engineering workflow management
IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed
CVE-2024-51454
6.5 Medium
-
ibm engineering workflow management
IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed
CVE-2025-33128
5.4 Medium
-
ibm business automation workflow containers and traditional, business automation workflow +1 more
IBM Business Automation Workflow information leak
CVE-2026-1248
4.3 Medium
-
ibm business automation workflow containers, business automation workflow traditional, business automation workflow +2 more
XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -
CVE-2025-13096
7.1 High
-
ibm business automation workflow containers, business automation workflow +1 more
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
CVE-2025-36058
5.5 Medium
-
ibm business automation workflow containers, business automation workflow +1 more
Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
CVE-2025-36059
4.7 Medium
-
ibm business automation workflow containers, business automation workflow traditional with process federation server, business automation workflow +1 more +3 more
Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -
CVE-2025-36054
6.1 Medium
-
ibm business automation workflow
IBM Business Automation Workflow missing authentication
CVE-2025-1495
4.3 Medium
-
ibm business automation workflow, business automation workflow enterprise service bus +1 more
IBM Business Automation Workflow cross-site scripting
CVE-2024-54179
5.4 Medium
-
ibm business automation workflow
IBM Business Automation Workflow improper input validation
CVE-2024-43188
4.9 Medium
-
ibm business automation workflow
IBM Business Automation Workflow information disclosure
CVE-2024-38321
5.3 Medium
-
ibm engineering workflow management
IBM Engineering Workflow Management cross-site scripting
CVE-2024-28793
4.9 Medium
-
ibm business automation workflow, cloud pak for business automation +1 more
IBM Business Automation Workflow cross-site scripting
CVE-2023-50947
5.4 Medium
-
ibm business automation workflow, cloud pak for business automation +1 more
IBM Business Automation Workflow cross-site scripting
CVE-2023-32339
6.1 Medium
-
ibm business automation workflow
IBM Business Automation Workflow cross-site scripting
CVE-2023-24957
5.4 Medium
-
ibm business automation workflow, business monitor +1 more
IBM Business Automation Workflow information disclosure
CVE-2022-43864
7.5 High
-
ibm business automation workflow
IBM Business Automation Workflow cross-site request forgery
CVE-2022-42435
4.3 Medium
-
ibm business process manager, business automation workflow +1 more
IBM Business Process Manager cross-site scripting
CVE-2022-41735
5.4 Medium
-
ibm business automation workflow
Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This...
CVE-2022-38390
5.4 Medium
-
ibm business automation workflow
"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20...
CVE-2022-35279
4.3 Medium
-
ibm business automation workflow, business process manager +1 more
IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19...
CVE-2022-22361
4.3 Medium
-
ibm business automation workflow, business process manager +1 more
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5...
CVE-2021-39046
4.9 Medium
-
ibm engineering workflow management, rational team concert +1 more
IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and...
CVE-2020-4989
4.3 Medium
-
ibm engineering workflow management, rational team concert +1 more
IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6...
CVE-2021-29701
4.3 Medium
-
ibm cloud pak for automation, workflow process service +1 more
IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability...
CVE-2021-38966
5.4 Medium
-
ibm business automation workflow, business process manager, cloud pak for automation +1 more +3 more
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0...
CVE-2021-38900
4.9 Medium
-
ibm business automation workflow, business process manager, business process manager standard +2 more +4 more
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0...
CVE-2021-38893
6.4 Medium
-
ibm business automation workflow, business process manager +1 more
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5...
CVE-2021-38883
5.4 Medium
-
ibm business automation workflow, business process manager +1 more
IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6...
CVE-2021-29753
5.9 Medium
-
ibm engineering lifecycle optimization, engineering workflow management, engineering requirements quality assistant on-premises +5 more +7 more
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow...
CVE-2021-29844
5.4 Medium
-
ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 more
IBM Jazz Team Server products stores user credentials in clear text which can be read by an...
CVE-2021-29786
6.5 Medium
-
ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 more
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges...
CVE-2021-29774
7.5 High
-
ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 more
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...
CVE-2021-29713
5.4 Medium
-
ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 more
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...
CVE-2021-29673
5.4 Medium
-
ibm business automation workflow
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting...
CVE-2021-29835
5.4 Medium
-
ibm business automation workflow
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting...
CVE-2021-29878
5.4 Medium
-
ibm business automation workflow, business process manager +1 more
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0...
CVE-2021-29834
6.4 Medium
-
ibm engineering lifecycle optimization, engineering test management, engineering workflow management +7 more +9 more
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows...
CVE-2020-5004
5.4 Medium
-
ibm engineering lifecycle optimization, engineering test management, engineering workflow management +7 more +9 more
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow...
CVE-2020-4974
6.3 Medium
-
ibm engineering lifecycle optimization, engineering workflow management, engineering requirements quality assistant on-premises +4 more +6 more
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...
CVE-2021-20507
5.4 Medium
-
ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 more
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...
CVE-2020-5031
5.4 Medium
-
ibm business automation workflow, cloud pak for automation +1 more
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002...
CVE-2021-29775
6.4 Medium
-
ibm business automation workflow, business process manager, cloud pak for automation +2 more
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8...
CVE-2021-29751
3.1 Low
-
ibm qradar analyst workflow, security qradar analyst workflow +1 more
IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be...
CVE-2021-20396
4.0 Medium
-
ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 more
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...
CVE-2021-20519
5.4 Medium
- Show olderLoading…