Skip to content
OpenAdvisories
Medium WID-SEC-2023-1366 1 CVE

IBM Business Automation Workflow: Schwachstelle ermöglicht Cross-Site Scripting

Published Jun 5, 2023 · Updated Jun 5, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow <= 20.0.0.2 Product: Business Automation Workflow <= 22.0.1 Product: Business Automation Workflow 19.0.0.1 Product: Business Automation Workflow 20.0.0.1 Product: Business Automation Workflow 21.0.1 Product: Business Automation Workflow 21.0.2 Product: Business Automation Workflow 21.0.3 Product: Business Automation Workflow 22.0.2

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 1

  • Medium 6.1
    CVE-2023-32339

    IBM Business Automation Workflow cross-site scripting

    IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted se…

    IBM Business Automation Workflow

Revision history

  1. #1

    Initiale Fassung

References