6.4
Moyenne
CVE-2021-29775 IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are…
Description
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Business Automation Workflow 20.0 | 20.0.0.1 → 20.0.0.2 | Pas de correctif indiqué |
| Business Automation Workflow 19.0 | 19.0.0.1 → 19.0.0.3 | Pas de correctif indiqué |
| Business Automation Workflow 18.0 | 18.0.0.0 → 18.0.0.2 | Pas de correctif indiqué |
| Cloud Pak for Automation | 21.0.1 | Pas de correctif indiqué |
| Cloud Pak for Automation | 20.0.3.IF002 | Pas de correctif indiqué |
Autres CVE de Business Automation Workflow
Les 42 CVE de Business Automation Workflow →
CVE-2024-54179
IBM Business Automation Workflow and IBM Business Automation Workflow Enterprise Service Bus 24.0.0, 24.0.1 and…
5.4
Moyenne
CVE-2024-43188
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform…
4.9
Moyenne
CVE-2024-38321
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log…
5.3
Moyenne
CVE-2023-50947
IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting
5.4
Moyenne