Fix Readme
Abstract
This document lists APAR fixes included in IBM Business Automation Workflow on containers 25.0.1.0
Content
| Fix list for: | IBM Business Automation Workflow on containers |
|---|---|
| Product Release: | 25.0.1.0 |
| Publication Date: | 11 December 2025 |
Contents
To benefit from all the fixes listed in this document, install or update to IBM Business Automation Workflow on Containers 25.0.1.0. For more information, refer to the IBM Cloud Pak for Automation download documents.
The following table lists APARs specific to Business Automation Workflow on Containers. Depending on what components and capabilities you installed and configured, more fix information can apply to you. See the "List of Fixes" in Fix list for Cloud Pak for Business Automation 25.0.1.
Fixes that involve correcting security exposures are indicated with an 'X'.
| APAR/Known Issue | Security | Behavior Change | Title |
|---|---|---|---|
| DT419489 | X | CVE-2024-38820, CVE-2025-22233 - Update Spring framework in Business Automation Workflow | |
| DT440290 | X | CVE-2025-48734 in commons-beanutils | |
| DT443492 | X | Cross-Site scripting via Unauthenticated Endpoint - IBM Process Federation Server | |
| DT445908 | X | CVE-2025-27817, CVE-2025-27818 in kafka-clients-3.8.1.jar affecting event emitters | |
| DT446327 | X | CVE-2025-27817, CVE-2025-27818 in kafka-clients-3.8.1.jar may affect Case Event Emitters | |
| DT446350 | X | CVE-2025-7783 - form-data-4.0.0.tgz affects Process Admin Console | |
| DT446595 | X | Security vulnerability (CVE-2025-7783) in form-data-4.0.0.tgz affects Workflow Centre and Process Designer | |
| DT446922 | X | CVE-2025-48976 - DoS vulnerability in commons-fileupload affects IBM Business Automation Workflow | |
| DT447031 | X | CVE-2025-36172 Cross-Site Scripting vulnerability in Case Client | |
| DT447474 | X | Security vulnerability (CVE-2025-7783) in form-data-4.0.0.tgz affects Workplace | |
| DT448632 | X | CVE-2025-48924 in Apache commons-lang may affect IBM Business Automation Workflow | |
| DT450355 | X | CVE-2025-41242 - Update Spring framework in Business Automation Workflow | |
| DT451477 | X | Security - CVE-2025-58754 reported for axios-1.11.0 | |
| DT456229 | X | CVE-2025-13096 - XML Entity Expansion vulnerability in IBM Business Automation Workflow | |
| DT419413 | [DOC] The Content Object created for a re-use case property has a broken reference to the associated choice list in IBM Web Process Designer | ||
| DT425611 | Pages in Case Client are carrying over across roles | ||
| DT439279 | DOC - A sample is required to call the TWEnvironmentNamespace update() method | ||
| DT439656 | Uncaught TypeError when processing documents retrieved through ECM Document List or ECM File List view | ||
| DT439744 | An E_OBJECT_MODIFIED exception is thrown when trying to update the case instance folder with the current case stage information using the Javascript API completeParentCaseStage | ||
| DT439827 | Included Apache Johnzon classes might cause conflicts with Java External Services | ||
| DT439845 | Lack of security or owner on Quick Task Attachment Collection class leads to Quick Task Attachment Collection Disposal Policy throwing error: FNRCE0001E: E_ACCESS_DENIED | ||
| DT439909 | Instance migration with Case content fails with com.lombardisoftware.core.TeamWorksException | ||
| DT440081 | The REST API /ops/std/bpm/processes/count throws an exception when the process_ids parameter includes an instance id greater than 2147483647 | ||
| DT440434 | Included Java API for JSON Processing classes might cause conflicts with Java External Services | ||
| DT442280 | Opensearch configuration action.auto_create_index is not configured properly | ||
| DT442637 | Administration service is unable to be opened due to /teamworks/process.lsw being cached unexpectedly | ||
| DT442676 | TWObject de-serialization exception stops process instances that use nested heritage human services after migration to IBM Business Automation Workflow 24.0.0.0 | ||
| DT443522 | A NullPointerException Cannot invoke ''io.swagger.v3.oas.models.media.Schema.get$ref()'' because ''schema'' is null might occur during discovery or execution of a REST external service | ||
| DT443567 | Error in logs when loading portal components 'Caused by: java.lang.IndexOutOfBoundsException: No group 3' | ||
| DT443993 | The ECM File Uploader view in the Content Management toolkit regressed while trying to select multiple documents | ||
| DT444016 | Processes and service flows exposed as MQ services might not be started | ||
| DT446122 | DOC: Confusing mention of file based user registry limit when migrating to Cloud Pak from Business Automation from Business Automation Workflow | ||
| DT446772 | In a process, when a subprocess is defined as Repeatable, the process instance status may end as Completed even though the end event is defined as Terminate type | ||
| DT446797 | Single select view from the UI toolkit throws an error when a table row is deleted | ||
| DT446991 | DOC - The documentation is missing information about property <loop-detection-iterations> | ||
| DT446992 | In Business Automation Workflow 24.0, a configuration property <loop-detection-iterations> was added and is enabled by default; its default value causes a looping BPD to fail after 500 iterations | ||
| DT447005 | Process instance migration API call /ops/std/bpm/containers/migrate_without_policyfile fails | ||
| DT447017 | Case Activity fails to complete due to DB deadlock | ||
| DT447077 | Optimize Web Service APIs to avoid deadlocks in Content Platform Engine in kubernetes environments | ||
| DT447259 | Coach can't be edited in IBM Process Designer when using Date Time Picker view from Coaches toolkit | ||
| DT447504 | DT447504 - When the current stage is the first stage, an attempt to restart a non-existent prior case stage results in a failure with error FNRCE0007E | ||
| DT448066 | Locale initialization issues in IBM Business Automation Workflow 24.0.1.0 cause the Date time picker view from the UI toolkit to use the incorrect language | ||
| DT448169 | The localization resource strings in the Case toolkit are not translated | ||
| DT448176 | Top banner label in Business Automation Studio incorrectly display IBM Cloud Pak | ||
| DT448274 | DOC: Incorrect link for the Create API in the Advanced Searches REST APIs Documentation | ||
| DT448347 | tw.system.currentProcessInstance.parentCase.terminateActivities() API does not terminate failed workflow instances | ||
| DT448726 | Data mappings of an activity in a service flow might not be shown | ||
| DT448765 | The getTypeHierarchical cache refresh interval is set by default to one hour and when the cache expires, the cache refresh every hour causes slowness | ||
| DT448958 | In Workflow Center Process Admin Console, the Installed Apps page may display incorrect numbers of Running or Failed process instances for snapshots | ||
| DT449006 | Unable to copy/paste text when using Rich text view from the UI Toolkit in read-only mode | ||
| DT449118 | Unexpected behavior when typeahead behavior is enabled in a single select view from the UI Toolkit | ||
| DT449635 | Exposed Process Values (EPVs) are not automatically synchronized during snapshot deployment- IBM Business Automation Workflow | ||
| DT450150 | The static files related to Business Automation Workflow endpoints are not being cached causing performance issues when Case Client loads the desktop | ||
| DT450286 | Multiple content objects for the same parent case may be created for a Case solution | ||
| DT450303 | Uninitialized complex type business object variables cannot be updated in Process Inspector | ||
| DT450693 | After setting a view's visibility to Required in the client side human service editor, an error appears preventing one from making further modifications | ||
| DT450801 | When the locale is set to Turkish and there is a table with zero entries, there is a typo in the entries shown text | ||
| DT450834 | Details of content object properties displayed incorrectly in process editor | ||
| DT450835 | UCA processing leads to error : com.lombardisoftware.core.TeamWorksException: Type mismatch. Expected 'tw.object.BOName[]' type, but found 'tw.object.BOName[]' | ||
| DT450975 | DOC - Configuration property default-task-subject-use-prefix not documented in Knowledge Center | ||
| DT451052 | Process Instances cannot be deleted due to incorrect CAN_DELETE_INSTANCE value | ||
| DT451164 | When a service flow throws an error of type Map within a client-side human service, the data is incorrectly persisted in the database | ||
| DT451296 | Saved Searches imported into Process Federation Server might get saved with incorrect value for OWNER | ||
| DT451616 | Suspending a process instance fails with CWLLG2229E error when a boundary timer uses an extreme future year greater than 9200 | ||
| DT451651 | CWTBG0019E error occurs while running REST API call to complete a standalone User Task (Heritage Human Service) | ||
| DT451922 | After upgrading to IBM Business Automation Workflow 24.0.1.0 Integer and Decimal views are unexpectedly right aligned | ||
| DT452329 | The execution duration in Event Manager task history can be a negative value for short duration tasks | ||
| DT452348 | Some fields are unexpectedly highlighted as having an error in process portal tasks after upgrade to IBM Business Automation Workflow 24.0.1.0 | ||
| DT452721 | System tasks are incorrectly shown in the in-basket queues | ||
| DT452849 | Task list is blank when navigated back to task list and task list refresh delay is enabled | ||
| DT453198 | In nested expandable tables, the chevron points in wrong direction | ||
| DT453321 | Modal section view from the UI toolkit is not visible in coach layout | ||
| DT453403 | DOC: Missing requirements for administering and importing saved searches into Process Federation Server | ||
| DT453431 | Advanced process application snapshot status not properly updated in Process Admin Console | ||
| DT454434 | Exposing items text overlaps in the Process Admin Console | ||
| DT454461 | The bpm-dtp-date-active-color theme property is not used by the Date/time picker view from the UI Toolkit | ||
| DT454846 | When updating an existing document to newer version(s) of the document having a different mime type, the mime type of the document always reflects the mime type of the first version | ||
| DT455938 | DOC: When there are multiple TOS, documentation should instruct to fill out only the default TOS for cp4ba_db_name_user.property file. |
- 11 December 2025: Initial publish.
Related Information
Fix list for Cloud Pak for Business Automation 25.0.1
Fix list for IBM Business Automation Workflow on containers 25.0.0.0
Fix list for Cloud Pak for Business Automation 25.0.0
Fix list for IBM Business Automation Workflow on containers 24.0.1.0
Fix list for Cloud Pak for Business Automation 24.0.1
Fix list for IBM Business Automation Workflow on containers 24.0.0.0
Fix list for Cloud Pak for Business Automation 24.0.0
Fix list for IBM Business Automation Workflow on containers 23.0.2
Fix list for Cloud Pak for Business Automation 23.0.2
Fix list for IBM Business Automation Workflow on containers 23.0.1
Fix list for Cloud Pak for Business Automation 23.0.1
Fix list for IBM Business Automation Workflow on containers 21.0.3
[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS8JB4","label":"IBM Business Automation Workflow"},"ARM Category":[{"code":"a8m50000000Cca0AAC","label":"Upgrade and Migration"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"25.0.1"}]
Was this topic helpful?
Document Information
Modified date:
09 February 2026
UID
ibm17253290