Vulnerability Details CVE-2023-32339
IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 255587.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.8%
CVSS Severity
CVSS v3 Score 6.1
References
- https://https://www.ibm.com/support/pages/node/6998727
- https://https://www.ibm.com/support/pages/node/7001291
- https://www.ibm.com/support/pages/node/6998727
- https://https://www.ibm.com/support/pages/node/6998727
- https://https://www.ibm.com/support/pages/node/7001291
- https://www.ibm.com/support/pages/node/6998727
Products affected by CVE-2023-32339
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.0
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.2
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.3
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.3
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2