Known vulnerabilities in IBM Business Automation Workflow

Software CPE: cpe:2.3:a:ibm_corporation:ibm_business_automation_workflow:*:*:*:*:*:*:*:*
Total vulnerabilities: 557
Public exploits: 32
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Business Automation Workflow IBM Business Automation Workflow is affected by 557 known vulnerabilities: 5 critical, 42 high, 302 medium, 208 low Critical High Medium Low

Vulnerabilities (557)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139055 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-8646
CWE-444 High
No
No
- 22.07.2026 SB2026072215
SB2026072219
SB2026072328
and 19 more
#VU139054 - Resource exhaustion
CVE-2026-9320
CWE-400 Medium
No
No
- 22.07.2026 SB2026072214
SB2026072219
SB2026072328
and 19 more
#VU137314 - Resource exhaustion
CVE-2026-9071
CWE-400 Low
No
No
- 10.07.2026 SB2026071036
SB2026071037
SB2026072219
and 18 more
#VU136794 - Resource exhaustion
CVE-2026-9171
CWE-400 Medium
No
No
- 02.07.2026 SB2026070280
SB2026070646
SB2026070880
and 17 more
#VU136790 - Resource exhaustion
CVE-2026-9322
CWE-400 Medium
No
No
- 02.07.2026 SB2026070280
SB2026070646
SB2026070880
and 17 more
#VU136712 - Resource exhaustion
CVE-2026-50645
CWE-400 Low
No
No
- 02.07.2026 SB2026070266
SB2026070280
SB2026070646
and 22 more
#VU136705 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-11712
CWE-79 Low
No
No
- 02.07.2026 SB2026070259
SB2026070645
SB2026070819
and 10 more
#VU136702 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-11708
CWE-79 Low
No
No
- 02.07.2026 SB2026070256
SB2026070645
SB2026070819
and 10 more
#VU136697 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-11595
CWE-22 Low
No
No
- 02.07.2026 SB2026070252
SB2026070645
SB2026070819
and 10 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175
CWE-113 Medium
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 23 more
#VU124829 - Exposure of sensitive information to an unauthorized actor
CVE-2025-14915
CWE-200 Low
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 02.04.2026 SB2026040252
SB2026040326
SB2026040329
and 15 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714
CWE-401 Medium
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 23 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717
CWE-243 Medium
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 19 more
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637
CWE-249 High
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 29 more
#VU124542 - Error Handling
CVE-2026-21710
CWE-388 Medium
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 33 more
#VU124543 - Improper Access Control
CVE-2026-21711
CWE-284 Low
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 25.03.2026 SB20260325154
SB20260424153
SB20260424154
and 1 more
#VU124544 - Reachable Assertion
CVE-2026-21712
CWE-617 Medium
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 25.03.2026 SB20260325154
SB2026041725
SB20260424153
and 2 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713
CWE-208 Medium
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 22 more
#VU122489 - Heap-based Buffer Overflow
CVE-2026-25646
CWE-122 High
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 10.02.2026 SB2026021002
SB2026021255
SB2026021256
and 65 more
#VU121184 - Out-of-bounds read
CVE-2026-22801
CWE-125 Medium
No
No
24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 13.01.2026 SB2026011311
SB20260114154
SB2026012271
and 24 more


Showing elements 1 - 20 out of 557