[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv740vx-m1X6xei0v6V-KOFNp9n-T8rYzTvdnTts4aMg":3,"g5a-risk:CVE-2021-38900":166},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":27,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":87,"references":88,"referencesCount":103,"weaknesses":104,"weaknessesCount":108,"isActivelyExploited":109,"cisaInfo":27,"otxData":27,"relatedBlogPosts":110,"seoMetadata":111,"configurations":136,"relatedVendorCves":162,"notableEvents":163},"CVE-2021-38900","What is CVE-2021-38900?","IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.","IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensit...","2021-12-21T19:15:07.77","2022-07-12T17:42:04.277",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":39,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":38,"ImpactScore":29},"psirt@us.ibm.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":25,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",4.9,1.2,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":26,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":44,"ConfidentialityImpact":45,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.0113,[49,49,49,49,49,49,49],"Medium",[53,58,61,64,67,70,73,76,80,83],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"ibm","business_automation_workflow","18.0.0.0","cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"18.0.0.1","cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":62,"criteria":63,"vulnerable":4},"18.0.0.2","cpe:2.3:a:ibm:business_automation_workflow:18.0.0.2:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":65,"criteria":66,"vulnerable":4},"19.0.0.0","cpe:2.3:a:ibm:business_automation_workflow:19.0.0.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":68,"criteria":69,"vulnerable":4},"19.0.0.1","cpe:2.3:a:ibm:business_automation_workflow:19.0.0.1:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":71,"criteria":72,"vulnerable":4},"20.0.0.0","cpe:2.3:a:ibm:business_automation_workflow:20.0.0.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":74,"criteria":75,"vulnerable":4},"21.0.0.0","cpe:2.3:a:ibm:business_automation_workflow:21.0.0.0:*:*:*:-:*:*:*",{"vendor":54,"product":77,"version":78,"criteria":79,"vulnerable":4},"business_process_manager","8.5.0.0","cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",{"vendor":54,"product":77,"version":81,"criteria":82,"vulnerable":4},"8.6.0.0","cpe:2.3:a:ibm:business_process_manager:8.6.0.0:-:*:*:-:*:*:*",{"vendor":54,"product":84,"version":85,"criteria":86,"vulnerable":4},"workflow_process_service","21.0.2","cpe:2.3:a:ibm:workflow_process_service:21.0.2:*:*:*:*:*:*:*",10,[89,95,100],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F209607","Ibmcloud",[93,94],"VDB Entry","Vendor Advisory",{"url":96,"source":97,"tags":98},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6527776","Ibm",[99,94],"Patch",{"url":101,"source":97,"tags":102},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6528296",[94],3,[105],{"id":106,"name":106,"description":107},"Unknown","NVD-CWE-Other",1,false,[],{"title":112,"metaDescription":113,"keywords":114,"canonicalUrl":115,"structuredData":116},"What is CVE-2021-38900? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-38900, a medium severity cyber security vulnerability from 2021. IBM Business Process Manager 8.5 and 8.6 and IBM Business...","CVE-2021-38900, CVE-2021-38900 vulnerability, CVE-2021-38900 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, ibm security, business_automation_workflow vulnerability, business_process_manager vulnerability, workflow_process_service vulnerability","\u002Fwhat-is\u002Fcve-2021-38900",{"@context":117,"@type":118,"headline":112,"description":113,"datePublished":10,"dateModified":11,"author":119,"publisher":123,"about":127,"mainEntityOfPage":131,"articleSection":134,"keywords":135},"https:\u002F\u002Fschema.org","TechArticle",{"@type":120,"name":121,"url":122},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":120,"name":121,"url":122,"logo":124},{"@type":125,"url":126},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":128,"name":6,"description":129,"additionalType":130},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":132,"@id":133},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-38900","Cybersecurity","CVE-2021-38900, CVE-2021-38900 vulnerability, CVE-2021-38900 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[137],{"Operator":27,"Negate":27,"Nodes":138},[139],{"Operator":140,"Negate":27,"CPEMatch":141},"OR",[142,144,146,148,150,152,154,156,158,160],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B1D36993-75D4-4EDE-8748-A3FDE4C69DF3",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"10B802CE-F898-4B60-9E2C-4D271F9211C7",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FBD82AD2-FE98-4716-A60A-50554620A509",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"90104525-6A11-4A42-8DD8-BFE267FCF306",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5BC333C1-E9D6-42B0-AC11-2A98FDBFEF4D",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"830D598E-6916-4170-946D-C04411077148",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4716C07D-A372-47CC-BDE8-FEBBC8EDB919",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"989C89DF-C6CB-45C9-9592-30A83896BD71",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6DE7BCD3-C969-4248-B325-8EAAE9959797",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6DBD44DD-45DA-4453-8C78-810565251FD8",[],[],{"lastModified":11,"cacheTime":165,"version":42},1793216269236,{"score":167,"band":168,"action":169,"scoredAt":170},32,"Low","Monitor","2026-07-01T10:27:24.709362+00:00"]