Security Bulletin: Cross-Site Scripting vulnerability affect IBM Cloud Pak for Automation Workflow Process Service (CVE-2021-38893 CVE-2021-38966)

Summary Process Admin Console in IBM Cloud Pak for Automation Workflow is vulnerable to a Cross-Site Scripting attack. Vulnerability Details CVEID: CVE-2021-38966 DESCRIPTION: IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed...

CVE-2021-38966

creationtimestamp| type| source ---|---|--- 2021-12-21 22:13:51+00:00| seen| https://t.me/cibsecurity/34469...

CVE-2021-38966

CVE-2021-38966 affects IBM Cloud Pak for Business Automation / IBM Cloud Pak for Automation Web UI (21.0.2). The IBM Bulletins and the IBM X-Force entry indicate a cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript in the Web UI, potentiall...