VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 5, 2019· Updated Sep 16, 2024

CVE-2019-4149

CVE-2019-4149

Description

IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.03, V8.5.7.0 through V8.5.7.0 Cumulative Fix 2017.06, and V8.5.6.0 through V8.5.6.0 CF2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158415.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Business Process Managerllm-fuzzy2 versions
    >=8.6.0.0 <=2018.03; >=8.5.7.0 <=2017.06; >=8.5.6.0 <=CF2+ 1 more
    • (no CPE)range: >=8.6.0.0 <=2018.03; >=8.5.7.0 <=2017.06; >=8.5.6.0 <=CF2
    • (no CPE)range: 8.6.0.0
  • IBM/Business Automation Workflowllm-fuzzy2 versions
    >=18.0.0.0 <=18.0.0.2+ 1 more
    • (no CPE)range: >=18.0.0.0 <=18.0.0.2
    • (no CPE)range: 18.0.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.