medium5.4
CVE-2023-24957
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerab…
Impact
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246115.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Business Automation Workflow | from 19.0.0.1 through 19.0.0.3 from 20.0.0.1 before 21.0.3 from 21.0.1 through 21.0.3.1 from 22.0.1 before 22.0.2 Versions 18.0.0.0, 18.0.0.1 |