IBM Business Automation Workflow 24.0.0

productDE

cpe:/a:ibm:business_automation_workflow:24.0.0

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical250high785medium9low

updated 2026-10-27

vulnerabilities (1,329)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-38475US	critical9.1OT critical	100.0% (100th)	KEV	no fix	2024-07-01	—
CVE-2024-38472US	—	69.5% (99th)	Exploit	no fix	2024-07-01	—
CVE-2024-38476US	critical9.8	41.6% (99th)	Exploit	no fix	2024-07-01	—
CVE-2024-38473US	—	25.9% (98th)	Exploit	no fix	2024-07-01	—
CVE-2023-38709US	—	3.91% (90th)	Exploit	no fix	2024-04-04	—
CVE-2024-36886US	high7.8	1.31% (70th)	Exploit	no fix	2024-05-30	—
CVE-2023-52654US	medium4.7OT elevated	0.89% (59th)	Exploit	no fix	2024-05-14	—
CVE-2024-26594US	high7.1	51.2% (99th)	—	no fix	2024-02-23	—
CVE-2024-39573US	—	35.4% (98th)	—	no fix	2024-07-01	—
CVE-2023-52755US	—	28.1% (98th)	—	no fix	2024-05-21	—
CVE-2024-38477US	high7.5	3.15% (88th)	—	no fix	2024-07-01	—
CVE-2024-38474US	critical9.8	2.46% (84th)	—	no fix	2024-07-01	—
CVE-2024-36387US	—	1.71% (77th)	—	no fix	2024-07-01	—
CVE-2024-27053US	—	1.65% (76th)	—	no fix	2024-05-01	—
CVE-2024-35960US	—	1.41% (73rd)	—	no fix	2024-05-20	—
CVE-2024-27405US	—OT elevated	1.30% (70th)	—	no fix	2024-05-17	—
CVE-2023-52832US	—OT elevated	1.26% (70th)	—	no fix	2024-05-21	—
CVE-2023-52735US	—	1.22% (68th)	—	no fix	2024-05-21	—
CVE-2024-35955US	—	1.18% (67th)	—	no fix	2024-05-20	—
CVE-2024-27028US	—	1.18% (67th)	—	no fix	2024-05-01	—
CVE-2024-35845US	—	1.17% (67th)	—	no fix	2024-05-17	—
CVE-2024-5564US	—	1.17% (67th)	—	no fix	2024-05-31	—
CVE-2024-21217US	—	1.15% (67th)	—	no fix	2024-10-15	—
CVE-2023-42950US	high8.8	1.07% (65th)	—	no fix	2024-03-28	—
CVE-2023-52798US	—	1.03% (63rd)	—	no fix	2024-05-21	—
CVE-2024-26621US	medium5.5	1.01% (63rd)	—	no fix	2024-03-02	—
CVE-2024-21208US	—	1.01% (63rd)	—	no fix	2024-10-15	—
CVE-2024-35857US	—	0.98% (62nd)	—	no fix	2024-05-17	—
CVE-2023-52699US	—	0.97% (62nd)	—	no fix	2024-05-19	—
CVE-2024-36912US	—	0.97% (62nd)	—	no fix	2024-05-30	—
CVE-2024-27388US	medium5.5	0.96% (61st)	—	no fix	2024-05-01	—
CVE-2024-21235US	—	0.93% (60th)	—	no fix	2024-10-15	—
CVE-2024-36896US	—	0.92% (60th)	—	no fix	2024-05-30	—
CVE-2024-35823US	—	0.92% (60th)	—	no fix	2024-05-17	—
CVE-2020-26556US	high7.5	0.91% (60th)	—	no fix	2021-05-24	—
CVE-2021-47075US	—	0.91% (60th)	—	no fix	2024-03-01	—
CVE-2024-36929US	medium5.5	0.90% (60th)	—	no fix	2024-05-30	—
CVE-2020-26558US	medium4.2	0.87% (59th)	—	no fix	2021-05-24	—
CVE-2023-52776US	—	0.86% (58th)	—	no fix	2024-05-21	—
CVE-2020-26560US	high8.1OT elevated	0.85% (58th)	—	no fix	2021-05-24	—
CVE-2020-26559US	high8.8OT elevated	0.85% (58th)	—	no fix	2021-05-24	—
CVE-2024-26690US	—	0.84% (58th)	—	no fix	2024-04-03	—
CVE-2020-26557US	high7.5OT elevated	0.83% (57th)	—	no fix	2021-05-24	—
CVE-2024-26901US	medium5.5	0.83% (57th)	—	no fix	2024-04-17	—
CVE-2024-26731US	—	0.83% (57th)	—	no fix	2024-04-03	—
CVE-2025-59775US	—	0.82% (57th)	—	no fix	2025-12-05	—
CVE-2023-52696US	—	0.82% (57th)	—	no fix	2024-05-17	—
CVE-2024-21210US	—	0.81% (57th)	—	no fix	2024-10-15	—
CVE-2023-52738US	—	0.80% (56th)	—	no fix	2024-05-21	—
CVE-2024-35878US	—	0.79% (56th)	—	no fix	2024-05-19	—

showing 50 of 1,329

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference261 CVEs
CWE-416Use After Free147 CVEs
CWE-401Missing Release of Memory after Effective Lifetime134 CVEs
CWE-20Improper Input Validation130 CVEs
CWE-667Improper Locking112 CVEs
CWE-125Out-of-bounds Read88 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')76 CVEs
CWE-787Out-of-bounds Write74 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)1,329 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan