cbcvebase.
CVE-2024-43188
published 2024-09-18

CVE-2024-43188: IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client…

PriorityP423medium4.9CVSS 3.1
AVNACLPRHUINSUCNIHAN
EPSS
0.32%
24.8th percentile
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.

Affected

11 ranges
VendorProductVersion rangeFixed in
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow18.0.0.1 – 18.0.0.3—
ibmbusiness_automation_workflow19.0.0.1 – 19.0.0.3—
ibmbusiness_automation_workflow21.0.1 – 21.0.3.1—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.