What’s Vulnerable › Products

IBM Business Automation Workflow vulnerabilities

58 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your IBM Business Automation Workflow version is affected

Latest IBM Business Automation Workflow vulnerabilities

• CVE-2026-12752 — Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026 (CVSS 7.1)
• CVE-2026-12742 — Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026 (CVSS 5.4)
• CVE-2026-12756 — Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026 (CVSS 7.1)
• CVE-2026-13107 — Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026 (CVSS 7.1)
• CVE-2026-12730 — Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers (CVSS 3.8)
• CVE-2026-1248 — IBM Business Automation Workflow information leak (CVSS 4.3)
• CVE-2025-13096 — XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - (CVSS 7.1)
• CVE-2025-36059 — Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025 (CVSS 5.5)
• CVE-2025-36058 — Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025 (CVSS 5.5)
• CVE-2025-36054 — Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server - (CVSS 6.1)
• CVE-2025-1495 — IBM Business Automation Workflow missing authentication (CVSS 4.3)
• CVE-2024-54179 — IBM Business Automation Workflow cross-site scripting (CVSS 5.4)
• CVE-2024-43188 — IBM Business Automation Workflow improper input validation (CVSS 4.9)
• CVE-2024-38321 — IBM Business Automation Workflow information disclosure (CVSS 6.5)
• CVE-2023-50947 — IBM Business Automation Workflow cross-site scripting (CVSS 5.4)
• CVE-2023-24957 — IBM Business Automation Workflow cross-site scripting (CVSS 5.4)
• CVE-2022-43864 — IBM Business Automation Workflow information disclosure (CVSS 7.5)
• CVE-2022-42435 — IBM Business Automation Workflow cross-site request forgery (CVSS 8.8)
• CVE-2022-41735 — IBM Business Process Manager cross-site scripting (CVSS 6.1)
• CVE-2022-38390 — (CVSS 5.4)
• CVE-2022-35279 — (CVSS 4.3)
• CVE-2022-22361 — (CVSS 6.5)
• CVE-2021-39046 — (CVSS 4.9)
• CVE-2021-38900 — (CVSS 6.5)
• CVE-2021-38893 — (CVSS 5.4)