Skip to content
Sign in
4.4 Medium

CVE-2024-28775 IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting

Description

IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285648.

Affected products and versions

Product Affected versions Fixed in
WebSphere Automation 1.7.0 No fix stated
websphere 1.7.0 No fix stated

Other CVEs of WebSphere Automation

The 3 CVEs of WebSphere Automation →
CVE-2024-54181 IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to… 7.2 High CVE-2024-28764 IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection 6.5 Medium
Track this CVE