NetSight
IP …
medium5.4

CVE-2023-50947

IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting.

Impact

IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.

Affected products

VendorProductAffected versions
IbmBusiness Automation Workflow
from 19.0.0.1 through 19.0.0.3
from 21.0.1 through 21.0.3.1
Versions 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3
IbmCloud Pak For Business Automation
from 18.0.0 through 18.0.2
from 19.0.1 through 19.0.3
from 20.0.1 through 20.0.3
Versions 21.0.1, 21.0.3, 22.0.1

Weakness classification

CWE-79

References