Security Bulletin: Cross-site scripting vulnerability affect IBM Business Automation Workflow - CVE-2023-35024

Summary IBM Business Automation Workflow is vulnerable to a Cross-site scripting attack. Vulnerability Details CVEID:CVE-2023-35024 DESCRIPTION: IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...

CVE-2023-35024

CVE-2023-35024 affects IBM Cloud Pak for Business Automation (versions 18.0.0–22.0.2). It is a cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. IBM’s remediation guidance spec...