IBM Business Automation Workflow is a set of workflow automation solutions from IBM in the United States. The product is mainly used for workflow management, compliance management, and has features such as workflow visibility and scalability. A cross-site scripting vulnerability exists in IBM Business Automation Workflow. The vulnerability stems from the fact that IBM Business Automation Workflow is vulnerable to cross-site scripting attacks. An attacker could exploit the vulnerability to steal credentials in a trusted session.