Description IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.
An information disclosure vulnerability has been identified in IBM Business Automation Workflow, both in containerized and traditional deployments. This vulnerability may leak details about the application's database structure through error messages. It affects versions 24.0.0, 24.0.1, 25.0.0, and 25.0.1.
Users are advised to upgrade to IBM Business Automation Workflow version 25.0.1 or version 24.0.1. If using version 25.0.0, upgrade to 25.0.0-IF004. For version 24.0.0, upgrade to 24.0.0-IF009.
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 27, 2026 Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration CWE-ID CWE Name Source CWE-209 Generation of Error Message Containing Sensitive Information CISA-ADP
Affected Products Product Versions ibm business automation workflow 24.0.0 -
24.0.0 if001
24.0.0 if002
24.0.0 if003
24.0.0 if004
24.0.0 if005
24.0.0 if006
24.0.0 if007
24.0.0 if008
24.0.1 -
24.0.1 if001
24.0.1 if002
24.0.1 if003
24.0.1 if004
24.0.1 if005
24.0.1 if006
25.0.0 -
25.0.0 if001
25.0.0 if002
25.0.0 if003
25.0.1 -
Viewing 5 of 21 versions. View all CPE cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.1:-:*:*:containers:*:*:* cpe:2.3:a:ibm:business_automation_workflow:25.0.1:-:*:*:traditional:*:*:* Remediation No remediation found in references.
Change History 5 change records found show changes