NA

CVE-2023-24957

Published: 06/05/2023 Updated: 15/05/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246115.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm business automation workflow

ibm business automation workflow 18.0.0.0

ibm business automation workflow 18.0.0.1

ibm business automation workflow 18.0.0.2

ibm business automation workflow 21.0.3

ibm business automation workflow 20.0.0.1

ibm business automation workflow 20.0.0.2

ibm business automation workflow 22.0.1

ibm business automation workflow 22.0.2