Skip to content
OpenAdvisories
Medium WID-SEC-2023-0743 1 CVE

IBM Business Automation Workflow: Schwachstelle ermöglicht Cross-Site Scripting

Published Mar 23, 2023 · Updated Mar 23, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow containers 20.0.0.2 Product: Business Automation Workflow containers 21.0.3 Product: Business Automation Workflow containers 22.0.1 Product: Business Automation Workflow containers 22.0.2 Product: Business Automation Workflow Service Bus 22.0.2 Product: Business Automation Workflow traditional 19.0.0.3 Product: Business Automation Workflow traditional 20.0.0.1 Product: Business Automation Workflow traditional 20.0.0.2 Product: Business Automation Workflow traditional 21.0.2 Product: Business Automation Workflow traditional 21.0.3.1 Product: Business Automation Workflow traditional 22.0.2

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 1

  • Medium 5.4
    CVE-2023-24957

    IBM Business Automation Workflow cross-site scripting

    IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th…

    IBM Business Automation Workflow

Revision history

  1. #1

    Initiale Fassung

References