Threats tagged 'ghsa-6px2-j97p-2pf7'

IBM Cloud Pak for Business Automation versions 24.0.0 through 25.0.0 Interim Fix 001 and earlier unsupported releases of IBM Business Automation Workflow are affected by a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated user to inject arbitrary JavaScript into the web user interface, potentially altering functionality and leading to credential disclosure within a trusted session. The vulnerability has a medium severity rating with a CVSS score of 6.4.