6655 matches found
IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2021-101696)
IBM Business Automation Workflow is a workflow automation solution from IBM Corporation of the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.IBM Business Automation Workflow has a cross-sit...
Security Bulletin: Multiple security vulnerabilities with IBM Content Navigator component in IBM Business Automation Workflow -CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090
Summary The embedded IBM Content Navigator component, that is shipped with IBM Business Automation Workflow is vulnerable to multiple vulnerabilities. Vulnerability Details CVEID: CVE-2021-35516 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an out-of-memory...
CVE-2021-38883
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
CVE-2021-38883
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
Cross site scripting
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
CVE-2021-38883
CVE-2021-38883 affects IBM Business Automation Workflow (versions 18.0.0.x, 19.0.0.x, 20.0.0.x, 21.0.x) and IBM Business Process Manager (8.5.x, 8.6.x). Root cause: cross-site scripting via the Web UI due to lack of sufficient data validation/filtering of user-supplied data during the file upload...
CVE-2021-38883
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
Security Bulletin: Apache Log4j vulnerability affects IBM Business Automation Workflow (CVE-2021-44228)
Summary Process Federation Server PFS, shipped with IBM Business Automation Workflow BAW, is vulnerable to a vulnerability caused by log4j. The vulnerability is included in the ElasticSearch client library used by PFS. The ElasticSearch vulnerable library was also shipped in offline documentation...
Knime Analytics Platform code issue vulnerability
Knime Analytics Platform is a free open source data analysis, reporting and integration platform from the Swiss company Knime.KNIME Analytics Platform versions prior to 4.5.0 contain a code issue vulnerability that can be exploited by attackers to conduct XXE attacks via crafted workflow files...
PT-2021-22308
Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow versions 18.0 through 21.0 IBM Business Process Manager versions 8.5 through 8.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...
CVE-2021-38883: Improper Neutralization of Input During Web Page Generation
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
IBM Business Process Manager和IBM Business Automation Workflow 安全漏洞
IBM Business Automation Workflow is a suite of workflow automation solutions from IBM USA. The product is mainly used for workflow management, compliance management, and features workflow visibility and scalability. A security vulnerability exists in IBM Business Automation Workflow that stems fr...
IBM Business Automation Workflow 跨站脚本漏洞
IBM Business Automation Workflow is a workflow automation solution from IBM USA. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability.IBM Business Automation Workflow has a security vulnerability that stems from the...
Security Bulletin: Cross Site Scripting when uploading a file might affect IBM Business Automation Workflow - CVE-2021-38883
Summary IBM Business Automation Workflow may be vulnerable to a cross site scripting attack when uploading a file. Vulnerability Details CVEID: CVE-2021-38883 DESCRIPTION: IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...
CVE-2021-45096
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE external XML entity injection via a crafted workflow file .knwf, aka AP-17730...
CVE-2021-45096
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE external XML entity injection via a crafted workflow file .knwf, aka AP-17730...
CVE-2021-45096
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE external XML entity injection via a crafted workflow file .knwf, aka AP-17730...
Knime Analytics Platform 代码问题漏洞
Knime Analytics Platform is a free open source data analysis, reporting and integration platform from the Swiss company Knime.KNIME Analytics Platform versions prior to 4.5.0 contain a code issue vulnerability that can be exploited by attackers to conduct XXE attacks via crafted workflow files...
CVE-2021-45096
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE external XML entity injection via a crafted workflow file .knwf, aka AP-17730...
CVE-2021-45096: Improper Restriction of XML External Entity Reference
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE external XML entity injection via a crafted workflow file .knwf, aka AP-17730...