CVE-2022-38390

Published: Nov 17, 2022Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 233978.

Affected (6)

Products: Ibm: Business Automation Workflow

Ibm

1 product

Business Automation Workflow

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Automation Workflow	From 18.0.0.0 to 18.0.0.2
Ibm Business Automation Workflow	From 19.0.0.1 to 19.0.0.3
Ibm Business Automation Workflow	From 21.0.1 to 21.0.3.1
Ibm Business Automation Workflow	Version 20.0.0.1
Ibm Business Automation Workflow	Version 20.0.0.2
Ibm Business Automation Workflow	Version 22.0.1