CVE-2019-4204
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159125.
| Software | From | Fixed in |
|---|---|---|
| ibm / business_process_manager | 8.5.7.0 | 8.5.7.0.x |
| ibm / business_process_manager | 8.5.7.0-cf2016.12 | 8.5.7.0-cf2016.12.x |
| ibm / business_process_manager | 8.6.0.0 | 8.6.0.0.x |
| ibm / business_process_manager | 8.5.7.0-cf2017.06 | 8.5.7.0-cf2017.06.x |
| ibm / business_process_manager | 8.5.7.0-cf2017.03 | 8.5.7.0-cf2017.03.x |
| ibm / business_process_manager | 8.5.7.0-cf2016.09 | 8.5.7.0-cf2016.09.x |
| ibm / business_process_manager | 8.5.7.0-cf2016.06 | 8.5.7.0-cf2016.06.x |
| ibm / business_process_manager | 8.6.0.0-cf201803 | 8.6.0.0-cf201803.x |
| ibm / business_automation_workflow | 18.0.0.0 | 19.0.0.1.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime