Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-42435
HistoryJan 04, 2023 - 12:15 a.m.

CVE-2022-42435

2023-01-0400:15:10
CWE-352
[email protected]
web.nvd.nist.gov
ibm
business automation workflow
cross-site request forgery
vulnerability
x-force id

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.

Affected configurations

NVD
Node
ibmbusiness_automation_workflowMatch18.0.0
OR
ibmbusiness_automation_workflowMatch18.0.1
OR
ibmbusiness_automation_workflowMatch18.0.2
OR
ibmbusiness_automation_workflowMatch19.0.1
OR
ibmbusiness_automation_workflowMatch19.0.2
OR
ibmbusiness_automation_workflowMatch19.0.3
OR
ibmbusiness_automation_workflowMatch20.0.1
OR
ibmbusiness_automation_workflowMatch20.0.2
OR
ibmbusiness_automation_workflowMatch20.0.3
OR
ibmbusiness_automation_workflowMatch21.0.1
OR
ibmbusiness_automation_workflowMatch21.0.1if001
OR
ibmbusiness_automation_workflowMatch21.0.1if002
OR
ibmbusiness_automation_workflowMatch21.0.1if003
OR
ibmbusiness_automation_workflowMatch21.0.1if004
OR
ibmbusiness_automation_workflowMatch21.0.1if005
OR
ibmbusiness_automation_workflowMatch21.0.1if006
OR
ibmbusiness_automation_workflowMatch21.0.1if007
OR
ibmbusiness_automation_workflowMatch21.0.2
OR
ibmbusiness_automation_workflowMatch21.0.2if001
OR
ibmbusiness_automation_workflowMatch21.0.2if002
OR
ibmbusiness_automation_workflowMatch21.0.2if003
OR
ibmbusiness_automation_workflowMatch21.0.2if004
OR
ibmbusiness_automation_workflowMatch21.0.2if005
OR
ibmbusiness_automation_workflowMatch21.0.2if006
OR
ibmbusiness_automation_workflowMatch21.0.2if007
OR
ibmbusiness_automation_workflowMatch21.0.2if008
OR
ibmbusiness_automation_workflowMatch21.0.2if009
OR
ibmbusiness_automation_workflowMatch21.0.2if010
OR
ibmbusiness_automation_workflowMatch21.0.2if011
OR
ibmbusiness_automation_workflowMatch21.0.2if012
OR
ibmbusiness_automation_workflowMatch21.0.3
OR
ibmbusiness_automation_workflowMatch21.0.3if001
OR
ibmbusiness_automation_workflowMatch21.0.3if002
OR
ibmbusiness_automation_workflowMatch21.0.3if003
OR
ibmbusiness_automation_workflowMatch21.0.3if004
OR
ibmbusiness_automation_workflowMatch21.0.3if005
OR
ibmbusiness_automation_workflowMatch21.0.3if006
OR
ibmbusiness_automation_workflowMatch21.0.3if007
OR
ibmbusiness_automation_workflowMatch21.0.3if008
OR
ibmbusiness_automation_workflowMatch21.0.3if009
OR
ibmbusiness_automation_workflowMatch21.0.3if010
OR
ibmbusiness_automation_workflowMatch21.0.3if011
OR
ibmbusiness_automation_workflowMatch21.0.3if012
OR
ibmbusiness_automation_workflowMatch21.0.3if013
OR
ibmbusiness_automation_workflowMatch21.0.3if014
OR
ibmbusiness_automation_workflowMatch21.0.3if015
OR
ibmbusiness_automation_workflowMatch22.0.1
OR
ibmbusiness_automation_workflowMatch22.0.1if001
OR
ibmbusiness_automation_workflowMatch22.0.1if002
OR
ibmbusiness_automation_workflowMatch22.0.1if003
OR
ibmbusiness_automation_workflowMatch22.0.1if004
OR
ibmbusiness_automation_workflowMatch22.0.1if005

Related

ibm 2
cve 1
cvelist 1
prion 1
ibm
ibm
Security Bulletin: Cross-Site Request Forgery vulnerability affects IBM Business Automation Workflow - CVE-2022-42435
2023-01-09 16:54:08
Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2022
2022-12-30 10:25:33
cve
cve
CVE-2022-42435
2023-01-04 00:15:10
cvelist
cvelist
CVE-2022-42435 IBM Business Automation Workflow cross-site request forgery
2023-01-03 23:16:13
prion
prion
Cross site request forgery (csrf)
2023-01-04 00:15:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON
Related for NVD:CVE-2022-42435
ibm2cve1cvelist1prion1