CVE-2025-1495: IBM Business Automation Workflow

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation.

Affected products

• IBM Business Automation Workflow: version 24.0.1 only

Published 2025-05-03. Last modified 2026-06-17.