Skip to content
OpenAdvisories
Medium WID-SEC-2023-0553 1 CVE

IBM Business Automation Workflow: Schwachstelle ermöglicht Codeausführung

Published Mar 2, 2023 · Updated Mar 2, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow < V20.0.0.2 Product: Business Automation Workflow < V21.0.3.1 Product: Business Automation Workflow < V22.0.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um beliebigen Programmcode auszuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 1

  • High 7.5
    CVE-2022-34169 Public exploit EPSS 82%

    Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

    The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…

    Apache Software Foundation Apache Xalan-J openjdk-8 openjdk-lts Debian Ubuntu Alpine Maven

Revision history

  1. #1

    Initiale Fassung

References