Skip to content
OpenAdvisories
Medium WID-SEC-2022-2263 1 CVE

IBM Business Automation Workflow: Schwachstelle ermöglicht Cross-Site Scripting

Published Dec 7, 2022 · Updated Dec 7, 2022 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow <= 19.0.0.3 Product: Business Automation Workflow <= 20.0.0.2 Product: Business Automation Workflow <= 21.0.3.1 Product: Business Automation Workflow <= 22.0.1

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 1

  • Medium 5.4
    CVE-2022-41735

    IBM Business Process Manager cross-site scripting

    IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functi…

    IBM Business Process Manager

Revision history

  1. #1

    Initiale Fassung

References