First published: Tue Jun 27 2023(Updated: )
IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Cloud Pak for Business Automation | <=V22.0.2 - V22.0.2-IF004 | |
IBM Cloud Pak for Business Automation | <=V21.0.3 - V21.0.3-IF020 | |
IBM Cloud Pak for Business Automation | <=V22.0.1 - V22.0.1-IF006 and later fixesV21.0.2 - V21.0.2-IF012 and later fixesV21.0.1 - V21.0.1-IF007 and later fixesV20.0.1 - V20.0.3 and later fixesV19.0.1 - V19.0.3 and later fixesV18.0.0 - V18.0.2 and later fixes | |
IBM Cloud Pak for Business Automation | =18.0.0 | |
IBM Cloud Pak for Business Automation | =18.0.2 | |
IBM Cloud Pak for Business Automation | =19.0.1 | |
IBM Cloud Pak for Business Automation | =19.0.3 | |
IBM Cloud Pak for Business Automation | =20.0.1 | |
IBM Cloud Pak for Business Automation | =20.0.3 | |
IBM Cloud Pak for Business Automation | =21.0.1 | |
IBM Cloud Pak for Business Automation | =21.0.1-interim_fix_001 | |
IBM Cloud Pak for Business Automation | =21.0.1-interim_fix_002 | |
IBM Cloud Pak for Business Automation | =21.0.1-interim_fix_003 | |
IBM Cloud Pak for Business Automation | =21.0.1-interim_fix_004 | |
IBM Cloud Pak for Business Automation | =21.0.1-interim_fix_005 | |
IBM Cloud Pak for Business Automation | =21.0.1-interim_fix_006 | |
IBM Cloud Pak for Business Automation | =21.0.1-interim_fix_007 | |
IBM Cloud Pak for Business Automation | =21.0.2 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_001 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_0012 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_002 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_003 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_004 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_005 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_006 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_007 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_008 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_009 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_010 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_011 | |
IBM Cloud Pak for Business Automation | =21.0.2-interim_fix_012 | |
IBM Cloud Pak for Business Automation | =21.0.3 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_001 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_002 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_003 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_004 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_005 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_006 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_007 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_008 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_009 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_010 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_011 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_012 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_013 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_014 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_015 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_016 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_017 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_018 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_019 | |
IBM Cloud Pak for Business Automation | =21.0.3-interim_fix_020 | |
IBM Cloud Pak for Business Automation | =22.0.1 | |
IBM Cloud Pak for Business Automation | =22.0.1-interim_fix_001 | |
IBM Cloud Pak for Business Automation | =22.0.1-interim_fix_002 | |
IBM Cloud Pak for Business Automation | =22.0.1-interim_fix_003 | |
IBM Cloud Pak for Business Automation | =22.0.1-interim_fix_004 | |
IBM Cloud Pak for Business Automation | =22.0.1-interim_fix_005 | |
IBM Cloud Pak for Business Automation | =22.0.1-interim_fix_006 | |
IBM Cloud Pak for Business Automation | =22.0.2 | |
IBM Cloud Pak for Business Automation | =22.0.2-interim_fix_001 | |
IBM Cloud Pak for Business Automation | =22.0.2-interim_fix_002 | |
IBM Cloud Pak for Business Automation | =22.0.2-interim_fix_003 | |
IBM Cloud Pak for Business Automation | =22.0.2-interim_fix_004 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.