← Back

CVE-2023-32339

nvd nist
Published: Jun 27, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 255587.

Affected (61)

1 product
Cloud Pak For Business Automation
Configuration A
61 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 18.0.0
Version 18.0.2
Version 19.0.1
Version 19.0.3
Version 20.0.1
Version 20.0.3
Version 21.0.1
Version 21.0.1 interim_fix_001
Version 21.0.1 interim_fix_002
Version 21.0.1 interim_fix_003
Version 21.0.1 interim_fix_004
Version 21.0.1 interim_fix_005
Version 21.0.1 interim_fix_006
Version 21.0.1 interim_fix_007
Version 21.0.2
Version 21.0.2 interim_fix_0012
Version 21.0.2 interim_fix_001
Version 21.0.2 interim_fix_002
Version 21.0.2 interim_fix_003
Version 21.0.2 interim_fix_004
Version 21.0.2 interim_fix_005
Version 21.0.2 interim_fix_006
Version 21.0.2 interim_fix_007
Version 21.0.2 interim_fix_008
Version 21.0.2 interim_fix_009
Version 21.0.2 interim_fix_010
Version 21.0.2 interim_fix_011
Version 21.0.2 interim_fix_012
Version 21.0.3
Version 21.0.3 interim_fix_001
Version 21.0.3 interim_fix_002
Version 21.0.3 interim_fix_003
Version 21.0.3 interim_fix_004
Version 21.0.3 interim_fix_005
Version 21.0.3 interim_fix_006
Version 21.0.3 interim_fix_007
Version 21.0.3 interim_fix_008
Version 21.0.3 interim_fix_009
Version 21.0.3 interim_fix_010
Version 21.0.3 interim_fix_011
Version 21.0.3 interim_fix_012
Version 21.0.3 interim_fix_013
Version 21.0.3 interim_fix_014
Version 21.0.3 interim_fix_015
Version 21.0.3 interim_fix_016
Version 21.0.3 interim_fix_017
Version 21.0.3 interim_fix_018
Version 21.0.3 interim_fix_019
Version 21.0.3 interim_fix_020
Version 22.0.1
Version 22.0.1 interim_fix_001
Version 22.0.1 interim_fix_002
Version 22.0.1 interim_fix_003
Version 22.0.1 interim_fix_004
Version 22.0.1 interim_fix_005
Version 22.0.1 interim_fix_006
Version 22.0.2
Version 22.0.2 interim_fix_001
Version 22.0.2 interim_fix_002
Version 22.0.2 interim_fix_003
Version 22.0.2 interim_fix_004

References (6)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.