Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2023-50947
HistoryFeb 04, 2024 - 1:15 a.m.

CVE-2023-50947

2024-02-0401:15:25
CWE-79
ibm
web.nvd.nist.gov
28
ibm
business automation
workflow
22.0.2
23.0.1
23.0.2
xss
vulnerability
cross-site scripting
javascript
credentials disclosure
nvd
cve-2023-50947

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

20.4%

JSON

IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.

Affected configurations

Nvd
Vulners
Node
ibmbusiness_automation_workflowRange19.0.0.1–19.0.0.3traditional
OR
ibmbusiness_automation_workflowRange21.0.1–21.0.3.1traditional
OR
ibmbusiness_automation_workflowMatch20.0.0.1-
OR
ibmbusiness_automation_workflowMatch20.0.0.1traditional
OR
ibmbusiness_automation_workflowMatch20.0.0.2-
OR
ibmbusiness_automation_workflowMatch20.0.0.2traditional
OR
ibmbusiness_automation_workflowMatch21.0.2-
OR
ibmbusiness_automation_workflowMatch21.0.3-containers
OR
ibmbusiness_automation_workflowMatch21.0.3if002containers
OR
ibmbusiness_automation_workflowMatch21.0.3if005containers
OR
ibmbusiness_automation_workflowMatch21.0.3if006containers
OR
ibmbusiness_automation_workflowMatch21.0.3if007containers
OR
ibmbusiness_automation_workflowMatch21.0.3if008containers
OR
ibmbusiness_automation_workflowMatch21.0.3if009containers
OR
ibmbusiness_automation_workflowMatch21.0.3if010containers
OR
ibmbusiness_automation_workflowMatch21.0.3if011containers
OR
ibmbusiness_automation_workflowMatch21.0.3if012containers
OR
ibmbusiness_automation_workflowMatch21.0.3if013containers
OR
ibmbusiness_automation_workflowMatch21.0.3if014containers
OR
ibmbusiness_automation_workflowMatch21.0.3if015containers
OR
ibmbusiness_automation_workflowMatch21.0.3if016containers
OR
ibmbusiness_automation_workflowMatch21.0.3if017containers
OR
ibmbusiness_automation_workflowMatch21.0.3if028containers
OR
ibmbusiness_automation_workflowMatch22.0.1-
OR
ibmbusiness_automation_workflowMatch22.0.1traditional
OR
ibmbusiness_automation_workflowMatch22.0.2-
OR
ibmbusiness_automation_workflowMatch22.0.2enterprise_service_bus
OR
ibmbusiness_automation_workflowMatch22.0.2traditional
OR
ibmbusiness_automation_workflowMatch23.0.1-
OR
ibmbusiness_automation_workflowMatch23.0.1enterprise_service_bus
OR
ibmbusiness_automation_workflowMatch23.0.1traditional
OR
ibmbusiness_automation_workflowMatch23.0.2enterprise_service_bus
OR
ibmcloud_pak_for_business_automationRange18.0.0–18.0.2
OR
ibmcloud_pak_for_business_automationRange19.0.1–19.0.3
OR
ibmcloud_pak_for_business_automationRange20.0.1–20.0.3
OR
ibmcloud_pak_for_business_automationMatch21.0.1
OR
ibmcloud_pak_for_business_automationMatch21.0.3-
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_001
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_002
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_003
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_004
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_005
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_006
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_007
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_008
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_009
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_010
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_011
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_012
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_013
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_014
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_015
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_016
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_017
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_018
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_019
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_020
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_021
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_022
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_023
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_024
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_025
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_026
OR
ibmcloud_pak_for_business_automationMatch21.0.3interim_fix_028
OR
ibmcloud_pak_for_business_automationMatch22.0.1
OR
ibmcloud_pak_for_business_automationMatch22.0.2
OR
ibmcloud_pak_for_business_automationMatch23.0.1
OR
ibmcloud_pak_for_business_automationMatch23.0.2
VendorProductVersionCPE
ibmbusiness_automation_workflow*cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow20.0.0.1cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:-:*:*:*
ibmbusiness_automation_workflow20.0.0.1cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow20.0.0.2cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:-:*:*:*
ibmbusiness_automation_workflow20.0.0.2cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow21.0.2cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:-:*:*:*
ibmbusiness_automation_workflow21.0.3cpe:2.3:a:ibm:business_automation_workflow:21.0.3:-:*:*:containers:*:*:*
ibmbusiness_automation_workflow21.0.3cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:containers:*:*:*
ibmbusiness_automation_workflow21.0.3cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if005:*:*:containers:*:*:*
ibmbusiness_automation_workflow21.0.3cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if006:*:*:containers:*:*:*
Rows per page:
1-10 of 651

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Business Automation Workflow",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "22.0.2, 23.0.1, 23.0.2"
      }
    ]
  }
]

Related

vulnrichment 1
cvelist 1
prion 1
nvd 1
ibm 2
vulnrichment
vulnrichment
CVE-2023-50947 IBM Business Automation Workflow cross-site scripting
2024-02-04 00:11:02
cvelist
cvelist
CVE-2023-50947 IBM Business Automation Workflow cross-site scripting
2024-02-04 00:11:02
prion
prion
Cross site scripting
2024-02-04 01:15:00
nvd
nvd
CVE-2023-50947
2024-02-04 01:15:25
ibm
ibm
Security Bulletin: Reflected cross-site scripting vulnerability affects IBM Business Automation Workflow - CVE-2023-50947
2024-02-02 11:09:38
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2024.
2024-02-02 08:25:11

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

20.4%

JSON
Related for CVE-2023-50947
vulnrichment1cvelist1prion1nvd1ibm2