Known vulnerabilities in IBM Business Automation Workflow 21.0.3-IF011

Version: 21.0.3-IF011
Software CPE: cpe:2.3:a:ibm_corporation:ibm_business_automation_workflow:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Business Automation Workflow version 21.0.3-IF011 IBM Business Automation Workflow 21.0.3-IF011 is affected by 4 vulnerabilities: 2 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76022 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27554
CWE-611 Medium
No
No
- 11.05.2023 SB2023051112
SB2023051523
SB2023051524
and 5 more
#VU72627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22860
CWE-79 Low
No
No
21.0.3 IF018, 22.0.2 IF002 28.02.2023 SB2023022830
SB2023030326
#VU53013 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23383
CWE-94 High
Public exploit available
No
21.0.3-IF012, 22.0.1-IF002 10.05.2021 SB2021022320
SB2021070402
SB2022081525
and 10 more
#VU50896 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23369
CWE-94 High
No
No
21.0.3-IF012, 22.0.1-IF002 23.02.2021 SB2021022320
SB2021022321
SB2021070402
and 10 more