Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08287
HistoryJan 21, 2022 - 12:00 a.m.

IBM Cloud Pak for Automation Input Validation Error Vulnerability

2022-01-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

29.0%

IBM Cloud Pak for Automation is an intelligent software platform for building automation applications in cloud environments from IBM USA. The platform uses pre-integrated automation technologies and low-code tools to design, build, and run automation applications and services on any cloud.A security vulnerability exists in IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio components, which stems from the input of the HOST header improper validation of the HOST header. A remote attacker could use this vulnerability to inject a specially crafted HTTP HOST header to conduct a variety of attacks on vulnerable systems, including cross-site scripting, cache poisoning, or session hijacking.

0.001 Low

EPSS

Percentile

29.0%

Related for CNVD-2022-08287