Lucene search
+L

3 matches found

NVD
NVD
added 2020/09/15 2:15 p.m.28 views

CVE-2020-4530

IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

5.4CVSS0.00561EPSS
SaveExploits0References2
CVE
CVE
added 2020/09/15 1:50 p.m.59 views

CVE-2020-4530

CVE-2020-4530 affects IBM Business Process Manager and IBM Business Automation Workflow (BAW), specifically BPM v8.0, 8.5, 8.6 and BAW C.D.0. The vulnerability is a cross-site scripting flaw stemming from inadequate validation of client-side data in the Web UI, allowing an attacker to inject arbi...

5.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/14 7:49 a.m.20 views

Security Bulletin: Cross-site scripting vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-4530

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to a cross-site scripting attack. This vulnerability only affects BPM and BAW profiles of type "Advanced". Vulnerability Details CVEID: CVE-2020-4530 DESCRIPTION: IBM Business Automation Workflow and IBM...

5.4CVSS0.7AI score0.00561EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder