VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 14, 2018· Updated Jun 17, 2026

CVE-2018-1848

CVE-2018-1848

Description

IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150947.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • IBM/Business Automation Workflowllm-fuzzy4 versions
    18.0.0.0 - 18.0.0.1+ 3 more
    • (no CPE)range: 18.0.0.0 - 18.0.0.1
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 18.0.0.0
  • IBM/Business Process Manager14 versions
    cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*range: >=7.5.0.0,<=7.5.1.2
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf201712:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf201803:*:*:*:*:*:*
  • IBM/Websphere
    cpe:2.3:a:ibm:websphere:*:*:*:*:lombardi:*:*:*
    Range: >=7.2.0.0,<=7.2.0.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.