Ibm Process Federation Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Process Federation Server: 1 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:process_federation_server

CVE-2025-36054 Medium · 6.1 CWE-79 Nov 6, 2025

Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -

IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.