Vulnerabilities > IBM > Business Automation Workflow > 21.0.3.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-18 | CVE-2024-43188 | Unspecified vulnerability in IBM Business Automation Workflow IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation. | 4.9 |
| 2024-02-04 | CVE-2023-50947 | Unspecified vulnerability in IBM products IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. | 5.4 |
| 2023-05-06 | CVE-2023-24957 | Cross-site Scripting vulnerability in IBM Business Automation Workflow IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. | 5.4 |
| 2023-01-26 | CVE-2022-43864 | Unspecified vulnerability in IBM Business Automation Workflow and Business Monitor IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. | 7.5 |
| 2022-12-07 | CVE-2022-41735 | Cross-site Scripting vulnerability in IBM Business Automation Workflow IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. | 6.1 |
| 2022-11-17 | CVE-2022-38390 | Cross-site Scripting vulnerability in IBM Business Automation Workflow Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. | 5.4 |