CNNVD-202602-070 Information
CNNVD ID
CNNVD-202602-070
Related CVE
- CNNVD Published: 2026-02-02
Description (Chinese)
IBM Cloud Pak for Business Automation是美国国际商业机器（IBM）公司的一组模块化的集成软件组件，专为任何混合云而构建，旨在实现工作自动化和加速业务增长。 IBM Cloud Pak for Business Automation 25.0.0至25.0.0 Interim Fix 002版本、24.0.1至24.0.1 Interim Fix 005版本和24.0.0至24.0.0 Interim Fix 007版本存在跨站脚本漏洞，该漏洞源于经过身份验证的用户可以在Web UI中嵌入任意JavaScript代码，从而在受信任会话中泄露凭据。
Description (English)
IBM Cloud Pak for Business Automation is a modular integrated software component of the United States International Business Machine (IBM) Company, built for any hybrid cloud, aimed at automating work and accelerating business growth. IBM Cloud Pak for Business Action 25.0.0 to 25.0.0 Interim Fix 002, 24.0.1 to 24.0.1 Interim Fix 005 and 24.0.0 to 24.0.0 Interim Fix 007 have cross-site script gaps, which stem from the fact that any JavaScript code can be embedded in Web UI by an identified user, thereby revealing evidence in a trusted session.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
国际商业机器
Published
2026-02-02
Last Modified
2026-02-24
References
https://www.ibm.com/support/pages/node/7259318
Patch
https://www.ibm.com/support/pages/node/7259318
Share on: