1. Home
  2. Vulnerabilities
  3. CVE-2024-28793

CVE-2024-28793

CVSS v3.1 4.9 (Medium)
49% Progress
EPSS 0.04 % (16th)
0.04% Progress
Advisories 1
NVD Status Awaiting Analysis
Info CVSS EPSS CAPEC References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286830.

Weaknesses
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE Status
PUBLISHED
NVD Status
Awaiting Analysis
CNA
IBM Corporation
Published Date
2024-05-28 12:15:08
(3 months ago)
Updated Date
2024-06-10 18:15:29
(3 months ago)