Skip to content
OpenAdvisories
Medium WID-SEC-2023-2940 1 CVE

IBM Business Automation Workflow: Schwachstelle ermöglicht Cross-Site Scripting

Published Nov 15, 2023 · Updated Nov 15, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow containers < 21.0.3-IF022 Product: Business Automation Workflow containers < 22.0.2-IF006 Product: Business Automation Workflow containers < 23.0.1 Product: Business Automation Workflow traditional < DT216018 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 1

  • Medium 4.6
    CVE-2023-35024

    IBM Cloud Pak for Business Automation cross-site scripting

    IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code …

    IBM Cloud Pak for Business Automation

Revision history

  1. #1

    Initiale Fassung

References