CVE-2021-29751low

CVE-2021-29751: low-severity vulnerability in IBM Business Automation Workflow

Published · Updated

Follow this CVE+ Monitor Business Automation Workflow+ Monitor Business Process Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.1epss 0.9%
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.
CVSS:3.0/C:L/UI:N/S:U/AV:N/PR:L/I:N/AC:H/A:N/E:U/RL:O/RC:C
Affected products
IBM · Business Automation WorkflowIBM · Business Process ManagerIBM · Cloud Pak for Automation
Related CVEs — IBM Business Automation Workflow

In the same product, most dangerous first.

CVE-2019-4424HIGHCVE-2019-4424EPSS 2.4%CVE-2017-1628—CVE-2017-1628EPSS 1.8%CVE-2018-1885MEDIUMCVE-2018-1885EPSS 1.8%CVE-2018-1674MEDIUMCVE-2018-1674EPSS 1.7%CVE-2021-20482HIGHCVE-2021-20482EPSS 1.4%CVE-2020-4531MEDIUMCVE-2020-4531EPSS 1.4%