Skip to content
OpenAdvisories
Medium WID-SEC-2025-2504 2 CVEs

IBM Business Automation Workflow: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Nov 5, 2025 · Updated Nov 6, 2025 · Revision 2 · de-DE

Vendor: IBM Product: Business Automation Workflow Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 2

  • Medium 6.4
    CVE-2025-36172

    Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002

    IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 001, 24.0.1 through 24.0.1 Interim Fix 004, 24.0.0 through 24.0.0 Interim Fix 006, and earlier unsupported releases IBM Business Automation Workflow is vulnerable to stored cross-site scr…

    IBM Cloud Pak for Business Automation
  • Medium 6.1
    CVE-2025-36054

    Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -

    IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable t…

    IBM Business Automation Workflow containers Business Automation Workflow traditional with Process Federation Server

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-37985

  2. #1

    Initiale Fassung

References