Cross-Site Scripting Vulnerability in IBM Case Manager and Business Automation Workflow
CVE-2020-4768

4.4MEDIUM

Key Information:

Vendor

IBM
Status
Business Automation Workflow
Case Manager
Vendor
CVE Published:
11 February 2021

What is CVE-2020-4768?

IBM Case Manager and IBM Business Automation Workflow are susceptible to a cross-site scripting vulnerability that enables attackers to inject arbitrary JavaScript code into the web application's user interface. This can disrupt normal functionality and pose security risks, including the potential leakage of user credentials during trusted sessions. Organizations using these IBM products should implement corrective measures promptly to safeguard sensitive information.

Affected Version(s)

Business Automation Workflow 18.0

Business Automation Workflow 19.0

Business Automation Workflow 20.0

References

https://www.ibm.com/support/pages/node/6414377
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/188907
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.