Cross site scripting

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-29835

IBM Business Automation Workflow (IBM Cloud Pak for Business Automation) is affected by CVE-2021-29835: cross-site scripting in the Web UI for versions 18.0–21.0. The root cause is improper handling of UI input leading to JavaScript injection, with potential credential exposure in a trusted sessi...