Cross-Site Scripting Vulnerability in IBM Business Automation Workflow

CVE-2021-29878

What is CVE-2021-29878?

IBM Business Automation Workflow versions 18.0, 19.0, 20.0, and 21.0 are susceptible to cross-site scripting, allowing attackers to inject arbitrary JavaScript code into the web interface. This can compromise the intended functionality of the application and potentially lead to unauthorized access to user credentials within a trusted session. It is crucial for organizations to implement security measures to mitigate this vulnerability and ensure user safety.

References