What’s Vulnerable › Vulnerabilities
CVE-2022-35279
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-11-03 · updated 2026-06-17
- Weakness: CWE-312
Description
"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."
Affected products
- IBM Business Automation Workflow: from 18.0.0.0 through 18.0.0.2; from 19.0.0.0 through 19.0.0.3; 20.0.0.1, 20.0.0.2, 21.0.1, 21.0.2, 21.0.3, 21.0.3-if002 (+9)
References
Get alerted when CVE-2022-35279 or the next vulnerability affects your stack