Known vulnerabilities in IBM Business Automation Workflow 22.0.1-IF001

Version: 22.0.1-IF001
Software CPE: cpe:2.3:a:ibm_corporation:ibm_business_automation_workflow:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Business Automation Workflow version 22.0.1-IF001 IBM Business Automation Workflow 22.0.1-IF001 is affected by 6 vulnerabilities: 2 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76022 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27554
CWE-611 Medium
No
No
- 11.05.2023 SB2023051112
SB2023051523
SB2023051524
and 5 more
#VU72627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22860
CWE-79 Low
No
No
21.0.3 IF018, 22.0.2 IF002 28.02.2023 SB2023022830
SB2023030326
#VU64011 - Improper input validation
CVE-2018-25031
CWE-20 Low
Public exploit available
No
22.0.1-IF002 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 23 more
#VU53848 - Out-of-bounds read
CVE-2018-25013
CWE-125 Low
No
No
22.0.1-IF002 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 7 more
#VU53013 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23383
CWE-94 High
Public exploit available
No
21.0.3-IF012, 22.0.1-IF002 10.05.2021 SB2021022320
SB2021070402
SB2022081525
and 10 more
#VU50896 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23369
CWE-94 High
No
No
21.0.3-IF012, 22.0.1-IF002 23.02.2021 SB2021022320
SB2021022321
SB2021070402
and 10 more