Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-15537
HistoryDec 21, 2021 - 12:00 a.m.

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2022-15537)

2021-12-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
ibm
automation workflow
cross-site scripting
vulnerability
credential disclosure
web ui
ibm usa
compliance management
workflow visibility
workflow management
stored xss

EPSS

0.001

Percentile

23.6%

IBM Business Automation Workflow is a workflow automation solution from IBM USA. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability.IBM Business Automation Workflow has a security vulnerability that stems from the vulnerability of IBM Business Automation Workflow to stored cross-site scripting. An attacker could exploit the vulnerability to allow users to embed arbitrary JavaScript code in the Web UI to alter the intended functionality, which could lead to credential disclosure in trusted sessions.

EPSS

0.001

Percentile

23.6%

Related for CNVD-2022-15537