Security Bulletin: Cross-Site Scripting vulnerability affect IBM Business Automation Workflow - CVE-2024-52364

Summary IBM Business Automation Workflow is vulnerable to a Cross-Site Scripting attack. Vulnerability Details CVEID:CVE-2024-52364 DESCRIPTION: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2...

CVE-2024-52364

creationtimestamp| type| source ---|---|--- 2025-02-05 12:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhgkfjjdmr2t 2025-02-05 14:58:15+00:00| seen| https://t.me/cvedetector/17291 2025-02-05 16:33:37+00:00| seen|...

CVE-2024-52364

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

CVE-2024-52364

CVE-2024-52364 affects IBM Cloud Pak for Business Automation versions 18.0.0–22.0.2. The description and IBM security bulletins confirm an authenticated user could embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session (Cross‑site Scriptin...

CVE-2024-52364 IBM Cloud Pak for Business Automation cross-site scripting

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...