CVE-2021-38893 vulnerability in IBM Products
Published on December 21, 2021
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209512.
Products Associated with CVE-2021-38893
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-38893 are published in these products:
Affected Versions
IBM Cloud Pak for Automation:- Version 21.0.2 is affected.
- Version 8.5.5 is affected.
- Version 8.5.7.CF201706 is affected.
- Version 8.5.7.CF201703 is affected.
- Version 8.5.7.CF201612 is affected.
- Version 8.5.7.CF201609 is affected.
- Version 8.5.7.CF201606 is affected.
- Version 8.5.7 is affected.
- Version 8.5.6.2 is affected.
- Version 8.5.6.1 is affected.
- Version 8.5.6 is affected.
- Version 8.6 is affected.
- Version 8.5.0.2 is affected.
- Version 8.5.0.1 is affected.
- Version 8.5 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.