Skip to content
CVE Tracker
Back

CVE-2018-1997

IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service…

Medium4.3EPSS 1.4%
Published
Updated
Reserved
Assigned by
ibm

Description

IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated attacker might send a specially crafted request that exhausts server-side memory. IBM X-Force ID: 154774.

Scores

CVSS scores of CVE-2018-1997, by who scored it
Scored byCVSSScoreVector
ibmCNA (assigner)3.0Medium4.3CVSS:3.0/A:L/PR:L/I:N/AC:L/C:N/S:U/UI:N/AV:N/RL:O/E:U/RC:C
NVDNVD · Modified3.0Medium6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
1.4% · top 28% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

  • Denial of Service

Affected products

  • IBM · Business Automation Workflow

    • affected 18.0.0.0
    • affected 18.0.0.1
    • affected 18.0.0.2

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .