CVE-2022-41735

CVSS V2 None CVSS V3 None
Description
IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 65687.
Overview
  • CVE ID
  • CVE-2022-41735
  • Assigner
  • psirt@us.ibm.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-07T17:15:10
  • Last Modified Date
  • 2022-12-09T12:43:59
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:* 1 OR 19.0.0.1 19.0.0.3
cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:* 1 OR 21.0.1 21.0.3.1
cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:-:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:-:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.2:-:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:*:*:*:traditional:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if005:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if006:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if007:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if008:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if009:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if010:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if011:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if012:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if013:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if014:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:traditional:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:22.0.1:-:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if001:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if002:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if003:*:*:containers:*:*:* 1 OR
cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if004:*:*:containers:*:*:* 1 OR
References
Reference URL Reference Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/237809
https://www.ibm.com/support/pages/node/6845496
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-41735
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41735
History
Created Old Value New Value Data Type Notes
2022-12-07 18:06:54 Added to TrackCVE
2022-12-07 21:15:58 2022-12-07T17:15:10.500 2022-12-07T17:15:10 CVE Published Date updated
2022-12-07 21:15:58 2022-12-07T21:00:47 CVE Modified Date updated
2022-12-07 21:15:58 Received Awaiting Analysis Vulnerability Status updated
2022-12-09 12:29:42 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-09 13:23:14 2022-12-09T12:43:59 CVE Modified Date updated
2022-12-09 13:23:14 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-09 13:23:14 CWE-79 Weakness Enumeration new
2022-12-09 13:23:15 CPE Information updated