Business automation workflow

This hub aggregates every CVE we track for Business automation workflow, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Business automation workflow.

• CVE-2026-1248IBM Business Automation Workflow information leak4.3May 27, 2026
• CVE-2025-13096XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -7.1Feb 2, 2026
• CVE-2025-36058Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 20255.5Jan 20, 2026
• CVE-2025-36059Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 20254.7Jan 20, 2026
• CVE-2025-36054Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -6.1Nov 6, 2025
• CVE-2025-1495IBM Business Automation Workflow missing authentication4.3May 3, 2025
• CVE-2024-54179IBM Business Automation Workflow cross-site scripting5.4Mar 3, 2025
• CVE-2024-43188IBM Business Automation Workflow improper input validation4.9Sep 18, 2024
• CVE-2024-38321IBM Business Automation Workflow information disclosure5.3Aug 3, 2024
• CVE-2023-50947IBM Business Automation Workflow cross-site scripting5.4Feb 4, 2024
• CVE-2023-32339IBM Business Automation Workflow cross-site scripting6.1Jun 27, 2023
• CVE-2023-24957IBM Business Automation Workflow cross-site scripting5.4May 6, 2023
• CVE-2022-43864IBM Business Automation Workflow information disclosure7.5Jan 25, 2023
• CVE-2022-42435IBM Business Automation Workflow cross-site request forgery4.3Jan 3, 2023
• CVE-2022-41735IBM Business Process Manager cross-site scripting5.4Dec 7, 2022