IBM Cloud Pak for Applications Cross-Site Scripting Vulnerability (CNVD-2021-54415)

IBM Cloud Pak for Applications is an enterprise containerized application development runtime platform that helps you modernize existing applications, embed additional security, and develop new applications for developing digital initiatives.A cross-site scripting vulnerability exists in IBM Cloud Pak for Applications version 4.3. The vulnerability can be exploited by users to embed arbitrary JavaScript code in the Web UI, which can change the intended functionality, which can lead to credential disclosure in trusted sessions. No detailed vulnerability details are currently available.