CVE-2021-29751

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-28 · updated 2026-06-17

Description

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

Affected products

IBM Business Automation Workflow: 18.0.0.0, 19.0.0.0, 20.0.0.0
IBM Business Process Manager: 8.5.0.0, 8.6.0.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
https://www.ibm.com/support/pages/node/6465127
https://www.ibm.com/support/pages/node/6467055
https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
https://www.ibm.com/support/pages/node/6465127
https://www.ibm.com/support/pages/node/6467055

Get alerted when CVE-2021-29751 or the next vulnerability affects your stack