WID-SEC-W-2023-0553

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM Business Automation Workflow: Schwachstelle ermöglicht Codeausführung

view advisory published 2023-03-02

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-34169UShigh7.5Exploit
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated b…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan