Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-29775

Опубликовано: 28 июн. 2021
Источник: nvd
CVSS3: 6.4
CVSS3: 5.4
CVSS2: 4.3
EPSS Низкий

Описание

IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:business_automation_workflow:20.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.3-if002:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_automation:21.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 37%
0.00161
Низкий

6.4 Medium

CVSS3

5.4 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github логотип

GHSA-h89h-g3v3-jc6q

github
больше 3 лет назад

IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029.

EPSS

Процентиль: 37%
0.00161
Низкий

6.4 Medium

CVSS3

5.4 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79