CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-41735

IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 65687.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.7%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2022-41735

Ibm » Business Automation Workflow » Version: 19.0.0.1

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.1
Ibm » Business Automation Workflow » Version: 19.0.0.2

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.2
Ibm » Business Automation Workflow » Version: 19.0.0.3

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.3
Ibm » Business Automation Workflow » Version: 20.0.0.1

cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1
Ibm » Business Automation Workflow » Version: 20.0.0.2

cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2
Ibm » Business Automation Workflow » Version: 21.0.1

cpe:2.3:a:ibm:business_automation_workflow:21.0.1
Ibm » Business Automation Workflow » Version: 21.0.2

cpe:2.3:a:ibm:business_automation_workflow:21.0.2
Ibm » Business Automation Workflow » Version: 21.0.3

cpe:2.3:a:ibm:business_automation_workflow:21.0.3
Ibm » Business Automation Workflow » Version: 21.0.3.1

cpe:2.3:a:ibm:business_automation_workflow:21.0.3.1
Ibm » Business Automation Workflow » Version: 22.0.1

cpe:2.3:a:ibm:business_automation_workflow:22.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-41735

Products

Pricing

Contact Us