Vulnerability Database

317,182

Total vulnerabilities in the database

CVE-2021-29751

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

  • Published: Jun 28, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-29751
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
ibm / business_process_manager 8.5.0.0 8.5.0.0.x
ibm / business_process_manager 8.6.0.0 8.6.0.0.x
ibm / business_automation_workflow 18.0.0.0 18.0.0.0.x
ibm / business_automation_workflow 19.0.0.0 19.0.0.0.x
ibm / business_automation_workflow 20.0.0.0 20.0.0.0.x