Cross site scripting

2023-06-2717:15:00

PRIOn knowledge base

www.prio-n.com

ibm

business automation workflow

xss

vulnerability

credential disclosure

web ui

javascript

trusted session

nvd

x-force

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.9%

JSON

IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 255587.

CPENameOperatorVersion
cloud_pak_for_business_automationeq21.0.1 interimfix7
cloud_pak_for_business_automationeq21.0.1 interimfix4
cloud_pak_for_business_automationeq21.0.1
cloud_pak_for_business_automationeq21.0.1 interimfix2
cloud_pak_for_business_automationeq21.0.1 interimfix3
cloud_pak_for_business_automationeq21.0.1 interimfix6
cloud_pak_for_business_automationeq21.0.1 interimfix5
cloud_pak_for_business_automationeq21.0.1 interimfix1
cloud_pak_for_business_automationeq21.0.2 interimfix9
cloud_pak_for_business_automationeq21.0.2 interimfix7

Name	Operator	Version
cloud_pak_for_business_automation	eq	21.0.1 interimfix7
cloud_pak_for_business_automation	eq	21.0.1 interimfix4
cloud_pak_for_business_automation	eq	21.0.1
cloud_pak_for_business_automation	eq	21.0.1 interimfix2
cloud_pak_for_business_automation	eq	21.0.1 interimfix3
cloud_pak_for_business_automation	eq	21.0.1 interimfix6
cloud_pak_for_business_automation	eq	21.0.1 interimfix5
cloud_pak_for_business_automation	eq	21.0.1 interimfix1
cloud_pak_for_business_automation	eq	21.0.2 interimfix9
cloud_pak_for_business_automation	eq	21.0.2 interimfix7