CVE-2021-29753

CVE-2021-29753 affects IBM Cloud Pak for Automation and IBM BPM. Affected: IBM Cloud Pak for Automation (V18.0–V21.0) with BPM V8.5–V8.6. Description: the products “transmit or store authentication credentials” using an insecure method, enabling potential unauthorized interception and retrieval o...

Security Bulletin: Information disclosure vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2021-29753

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2021-29753 DESCRIPTION: IBM Business Automation Workflow transmits or stores authentication credentials, but it uses an insecure method th...

CVE-2021-29753

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval...

Cross site scripting

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-29835

IBM Business Automation Workflow (IBM Cloud Pak for Business Automation) is affected by CVE-2021-29835: cross-site scripting in the Web UI for versions 18.0–21.0. The root cause is improper handling of UI input leading to JavaScript injection, with potential credential exposure in a trusted sessi...

CVE-2021-29835

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Cross-Site scripting vulnerability affect IBM Business Automation Workflow - CVE-2021-29835

Summary IBM Business Automation Workflow are vulnerable to a Cross Site Scripting attack. Vulnerability Details CVEID: CVE-2021-29835 DESCRIPTION: IBM Business Automation Workflow and IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed...

IBM Business Process Manager和IBM Business Automation Workflow 跨站脚本漏洞

IBM Business Automation Workflow is a workflow automation solution. The product is mainly used for workflow management, compliance management, and has features such as workflow visibility and scalability. IBM Business Automation Workflow has a cross-site scripting vulnerability that can be...

IBM Business Automation Workflow Cross-Site Scripting Vulnerability

IBM Business Automation Workflow is a workflow automation solution from IBM Corporation. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability.IBM Business Automation Workflow suffers from a cross-site scripting vulnerabilit...

CVE-2021-29878

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Cross site scripting

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-29878

IBM BUSINESS AUTOMATION WORKFLOW is affected by CVE-2021-29878, a cross-site scripting vulnerability in Case Builder within Workflow Center. The issue stems from insufficient validation/escaping of user-supplied parameters in the Web UI, enabling an attacker to embed arbitrary JavaScript and pote...

CVE-2021-29878

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Cross site scripting vulnerability affecting Case Builder in IBM Business Automation Workflow - CVE-2021-29878

Summary IBM Business Automation Workflow Case Builder in Workflow Center is vulnerable to cross site scripting. Vulnerability Details CVEID: CVE-2021-29878 DESCRIPTION: IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

Cross site scripting

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...

Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and IBM Business Process Manager (BPM)

Summary Security vulnerabilities have been reported for IBM SDK for Node.js. IBM Business Automation Workflow and IBM BPM include a stand-alone tool for editing configuration properties files that is based on IBM SDK for Node.js. Vulnerability Details CVEID: CVE-2021-22918 DESCRIPTION: Node.js is...

Security Bulletin: Multiple vulnerabilities may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) offline documentation

Summary IBM Business Process Manager and IBM Business Automation Workflow offline documentation packages open source libraries with known vulnerabilities. Do not install offline documentation and remove existing installations with the fix provided below. Vulnerability Details CVEID: CVE-2021-2335...

IBM Business Process Manager和IBM Business Automation Workflow 跨站脚本漏洞

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

Security Bulletin: Multiple security vulnerabilities with IBM Content Navigator component in IBM Business Automation Workflow - CVE-2021-20448, CVE-2021-20549, CVE-2021-20550, CVE-2021-29714

Summary The embedded IBM Content Navigator component, that is shipped with IBM Business Automation Workflow is vulnerable to multiple vulnerabilities. Vulnerability Details CVEID: CVE-2021-20550 DESCRIPTION: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability...

IBM Business Automation Workflow and IBM Business Process Manager Access Control Error Vulnerability

IBM Business Automation Workflow is a suite of workflow automation solutions.IBM Business Process Manager is a comprehensive business process management platform. An access control error vulnerability exists in IBM Business Automation Workflow and IBM Business Process Manager, which arises from t...