Known vulnerabilities in IBM Business Automation Workflow 24.0.1-IF003
Vendor:
IBM Corporation
Software:
IBM Business Automation Workflow
Version:
24.0.1-IF003
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_business_automation_workflow:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
86
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
25.0.0-IF004
24.0.0-IF009
24.0.1-IF008
25.0.0-IF005
26.0.0.0
25.0.1
24.0.0-IF008
24.0.1-IF007
25.0.0-IF003
24.0.1-IF006
24.0.1-IF003
24.0.0-IF007
25.0.0-IF002
25.0.0-IF001
24.0.1-IF005
24.0.1-IF004
24.0.0-IF006
25.0.0.0
24.0.0-IF005
24.0.1-IF002
24.0.1-IF001
21.0.3-IF039
24.0.0-IF004
21.0.2-IF011
21.0.3-IF010
24.0.1.0
21.0.3-IF037
24.0.0-IF003
24.0.0-IF002
24.0.0
21.0.3-IF035
21.0.3-IF034
23.0.2-IF006
24.0.0-IF001
21.0.3 IF034
23.0.2 IF006
21.0.3 IF033
23.0.2 IF005
21.0.3 IF031
23.0.2 IF003
21.0.3 IF028
23.0.1 IF006
21.0.3 IF030
23.0.2 IF002
21.0.3 IF022
22.0.2 IF006
21.0.3 IF026
23.0.1 IF004
23.0.2 IF001
21.0.3 IF029
23.0.2
21.0.3 IF025
23.0.1 IF003
23.0.1 IF005
21.0.3 IF027
21.0.3 IF024
23.0.1 IF002
21.0.3 IF023
23.0.1 IF001
23.0.1
21.0.3 IF021
22.0.2 IF005
21.0.3 IF020
22.0.2 IF004
21.0.3 IF019
22.0.2 IF003
21.0.3 IF018
21.0.3 IF017
22.0.2 IF002
22.0.2 IF001
21.0.3 IF016
22.0.1 IF006
-
22.0.2
21.0.3 IF015
22.0.1 IF005
22.0.1 IF003
21.0.3 IF014
22.0.1 IF004
21.0.3-IF012
21.0.3-IF011
22.0.1-IF002
22.0.1-IF001
18.0.0.2
22.0.1
18.0.0.1
18.0.0.0
19.0.0.3
19.0.0.2
19.0.0.1
20.0.0.2
20.0.0.1
21.0.3
21.0.2
21.0.1
18.0
19.0
20.0
21.0
Vulnerabilities (86)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU143925 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-33672 |
CWE-1321 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 18.08.2026 |
SB2026081815 SB2026081816 SB2026081831 and 1 more |
||
| #VU140605 - Improper Certificate Validation CVE-2026-33810 |
CWE-295 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 31.07.2026 |
SB2026073125 SB2026073183 SB2026073184 and 7 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 70 more |
||
| #VU139384 - Inefficient Regular Expression Complexity CVE-2026-33671 |
CWE-1333 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 26.07.2026 |
SB2026072609 SB2026072616 SB2026081816 and 2 more |
||
| #VU136685 - Insecure Temporary File CVE-2026-25645 |
CWE-377 | Low | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 02.07.2026 |
SB2026070223 SB2026070226 SB2026070229 and 15 more |
||
| #VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-35554 |
CWE-362 | High | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 21.05.2026 |
SB2026052106 SB2026052107 SB2026052541 and 8 more |
||
| #VU126569 - Server-Side Request Forgery (SSRF) CVE-2026-41488 |
CWE-918 | Low | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 20.04.2026 |
SB2026042099 SB20260825138 |
||
| #VU125804 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-2950 |
CWE-1321 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 10.04.2026 |
SB2026041094 SB2026042049 SB2026042720 and 14 more |
||
| #VU125803 - Improper Control of Generation of Code ('Code Injection') CVE-2026-4800 |
CWE-94 | High | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 10.04.2026 |
SB2026041094 SB20260410101 SB20260410102 and 59 more |
||
| #VU124833 - Server-Side Request Forgery (SSRF) CVE-2026-1561 |
CWE-918 | Low | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 02.04.2026 |
SB2026040252 SB2026040325 SB2026040331 and 14 more |
||
| #VU124825 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-29063 |
CWE-1321 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 02.04.2026 |
SB2026040246 SB2026040612 SB2026040627 and 32 more |
||
| #VU124817 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-27148 |
CWE-74 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 02.04.2026 |
SB2026040224 SB2026040225 SB20260825138 |
||
| #VU123997 - Improper input validation CVE-2026-2391 |
CWE-20 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 13.03.2026 |
SB2026031335 SB2026031336 SB2026032417 and 13 more |
||
| #VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-13465 |
CWE-1321 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 22.01.2026 |
SB2026012209 SB2026012701 SB2026012744 and 69 more |
||
| #VU121183 - Out-of-bounds read CVE-2026-22695 |
CWE-125 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 13.01.2026 |
SB2026011311 SB20260114154 SB2026012137 and 24 more |
||
| #VU121159 - Resource exhaustion CVE-2025-15284 |
CWE-400 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 12.01.2026 |
SB2026011229 SB2026011326 SB2026011926 and 38 more |
||
| #VU120348 - Out-of-bounds read CVE-2025-10158 |
CWE-125 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 26.12.2025 |
SB2025122689 SB2025122697 SB2025122698 and 27 more |
||
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 22.12.2025 |
SB2025122245 SB2026012084 SB2026012087 and 101 more |
||
| #VU118777 - Heap-based Buffer Overflow CVE-2025-65018 |
CWE-122 | Critical | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 46 more |
||
| #VU53202 - Command injection CVE-2021-23337 |
CWE-77 | Medium | 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0 | 12.05.2021 |
SB2021021525 SB2021051230 SB2021062703 and 59 more |
Showing elements 1 - 20 out of 86