What is the vulnerability ID for this IBM Business Process Manager vulnerability?

The vulnerability ID for this IBM Business Process Manager vulnerability is CVE-2021-29775.

What is the severity level of CVE-2021-29775?

The severity level of CVE-2021-29775 is medium with a CVSS score of 6.4.

Which versions of IBM Business Automation Workflow are affected by CVE-2021-29775?

IBM Business Automation Workflow version 19.0.03 and version 20.0 are affected by CVE-2021-29775.

Which versions of IBM Cloud Pak for Automation are affected by CVE-2021-29775?

IBM Cloud Pak for Automation version 20.0.3-IF002 and version 21.0.1 are affected by CVE-2021-29775.

How can this vulnerability be exploited?

This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to unauthorized access or manipulation of data.

Vulnerability/
CVE-2021-29775

medium

6.4

CWE

16/6/2021

25/6/2021

3/8/2024

CVE-2021-29775: XSS

First published: Wed Jun 16 2021(Updated: )

IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Business Automation Workflow	=19.0.0.3
IBM Business Automation Workflow	=20.0.0.0
IBM Cloud Pak for Automation	=20.0.3-if002
IBM Cloud Pak for Automation	=21.0.1
	<=V20.0V19.0.0.3

Remedy

https://www.ibm.com/support/pages/node/6465127

Remedy

https://www.ibm.com/support/pages/node/6467057

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6467057

Frequently Asked Questions

What is the vulnerability ID for this IBM Business Process Manager vulnerability?
The vulnerability ID for this IBM Business Process Manager vulnerability is CVE-2021-29775.
What is the severity level of CVE-2021-29775?
The severity level of CVE-2021-29775 is medium with a CVSS score of 6.4.
Which versions of IBM Business Automation Workflow are affected by CVE-2021-29775?
IBM Business Automation Workflow version 19.0.03 and version 20.0 are affected by CVE-2021-29775.
Which versions of IBM Cloud Pak for Automation are affected by CVE-2021-29775?
IBM Cloud Pak for Automation version 20.0.3-IF002 and version 21.0.1 are affected by CVE-2021-29775.
How can this vulnerability be exploited?
This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to unauthorized access or manipulation of data.

collector/nvd-index
agent/type
agent/remedy
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/author
agent/severity
agent/references
agent/description
agent/first-publish-date
agent/softwarecombine
collector/ibm-support
source/IBM
agent/software-canonical-lookup
agent/tags
agent/event
agent/trending
vendor/ibm
canonical/ibm business automation workflow
version/ibm business automation workflow/19.0.0.3
version/ibm business automation workflow/20.0.0.0
canonical/ibm cloud pak for automation
version/ibm cloud pak for automation/20.0.3-if002
version/ibm cloud pak for automation/21.0.1
version/ibm business automation workflow/v20.0v19.0.0.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.