Known vulnerabilities in IBM Business Automation Workflow 22.0.2 IF001

Version: 22.0.2 IF001
Software CPE: cpe:2.3:a:ibm_corporation:ibm_business_automation_workflow:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Business Automation Workflow version 22.0.2 IF001 IBM Business Automation Workflow 22.0.2 IF001 is affected by 2 vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76022 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27554
CWE-611 Medium
No
No
- 11.05.2023 SB2023051112
SB2023051523
SB2023051524
and 5 more
#VU72627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22860
CWE-79 Low
No
No
21.0.3 IF018, 22.0.2 IF002 28.02.2023 SB2023022830
SB2023030326