# Ibm Business Automation Workflow


- [CVE-2022-43864](https://insights.sbomify.com/CVE-2022-43864/): IBM Business Automation Workflow information disclosure (high 7.5)
- [CVE-2025-13096](https://insights.sbomify.com/CVE-2025-13096/): XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - (high 7.1)
- [CVE-2019-4424](https://insights.sbomify.com/CVE-2019-4424/): XML external entity in Business Automation Workflow (high 7.1)
- [CVE-2021-38893](https://insights.sbomify.com/CVE-2021-38893/): Cross-site scripting in Business Process Manager Standard (medium 6.4)
- [CVE-2021-29834](https://insights.sbomify.com/CVE-2021-29834/): Cross-site scripting in Business Automation Workflow (medium 6.4)
- [CVE-2021-29775](https://insights.sbomify.com/CVE-2021-29775/): Cross-site scripting in Business Automation Workflow (medium 6.4)
- [CVE-2020-4698](https://insights.sbomify.com/CVE-2020-4698/): Cross-site scripting in Business Automation Workflow (medium 6.4)
- [CVE-2019-4669](https://insights.sbomify.com/CVE-2019-4669/): SQL injection in Business Automation Workflow (medium 6.3)
- [CVE-2018-1674](https://insights.sbomify.com/CVE-2018-1674/): SQL injection in Business Process Manager (medium 6.3)
- [CVE-2025-36054](https://insights.sbomify.com/CVE-2025-36054/): Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server - (medium 6.1)
- [CVE-2018-1848](https://insights.sbomify.com/CVE-2018-1848/): Cross-site scripting in Business Automation Workflow (medium 6.1)
- [CVE-2021-29753](https://insights.sbomify.com/CVE-2021-29753/): Information disclosure in Business Automation Workflow (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/business-automation-workflow/