CVE-2022-35279
Estado: ModificadaMedia (4.3)—
"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.30%
- Percentil entre todas las CVEs puntuadas: 20
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-312
- CWE-312
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-35279",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-35279",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-05-02T20:21:13.695221Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 2.8
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "IBM Business Automation Workflow",
"versions": [
{
"status": "affected",
"version": "\"18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1\""
}
]
}
]
}
],
"published": "2022-11-03T20:15:28.853",
"references": [
{
"url": "https://www.ibm.com/support/pages/node/6829847",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://www.ibm.com/support/pages/node/6829847",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537.\""
},
{
"lang": "es",
"value": "\"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3 y 22.0.1 podrían revelar información confidencial de la versión a usuarios autenticados que podría usarse en futuros ataques contra el sistema. IBM X-Force ID: 230537.\""
}
],
"lastModified": "2026-06-17T04:51:42.720",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBA0D501-8535-4CAF-BFAD-88AC5E1FBA03",
"versionEndIncluding": "18.0.0.2",
"versionStartIncluding": "18.0.0.0"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BBBCE4C-7230-4CF5-A9BA-1BB8F479E433",
"versionEndIncluding": "19.0.0.3",
"versionStartIncluding": "19.0.0.0"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D36329EB-4317-4AB1-85FA-4E23F185C179"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "824ACC07-E351-437A-9FAB-7F2E47DE9205"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C7FDEC2-CBE3-4C5B-917D-37F2612018FB"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "485FFABA-EF59-4C36-8B6E-E32A99C02381"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.1:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83966976-3307-4B4C-AE62-7BF040BEF0F2"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2A3E3AF-14A2-44E6-A17F-ACD63B010E43"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.2:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB656C4F-19FC-4763-93C8-940A2B38B729"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1DC801A-0F25-48D2-8465-31B5A0939EE6"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00F5E82D-712A-4AB2-B0B2-BF03507D17D2"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if005:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0063E78F-2978-43F6-884D-B375E1111E87"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if006:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF6317BE-98DF-4A46-9F5B-326177D6AD68"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if007:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72A22C4B-AAF2-4A84-AF39-C1C396031D98"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if008:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39015A02-D36E-4CC9-A5E3-877DFD923ACD"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if009:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19586E74-8802-4C09-A240-D698EE30C570"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if010:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B06D109-E327-4A2A-9FC9-A5F454022C0D"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if011:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E67BEF93-133E-4507-B938-79D943AB82CF"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C6D1E72-FC9F-4A0A-8E80-A3CA8CB0EDAA"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:22.0.1:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69B77521-AF61-4711-9219-12D6DADB6F5F"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if001:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2AEA4BA-C309-4069-9226-B86C1B68F93C"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}