Threats tagged 'ghsa-954p-ff4g-qrwj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2025-36054IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through Medium6.1EPSS 0.2%2025-11-06GCVE DatabaseCVE-2025-36054 IBM Business Automation Workflow containers versions 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001, and traditional versions 24.0.0 through 24.0.1 and 25.0.0 are affected by a cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to inject arbitrary JavaScript into the web interface, potentially leading to credential disclosure within a trusted session. EPSS 0.2%Report on CVE-2025-36054 Vulnerability CWE-79 #ghsa-954p-ff4g-qrwj	GCVE Database	2025-11-06

Page 1 of 1