CVE-2020-4525: XSS
IBM Engineering Workflow Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182435.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2020-4525.
What is the severity level of CVE-2020-4525?
The severity level of CVE-2020-4525 is medium.
Which software products are affected by CVE-2020-4525?
IBM Engineering Workflow Management, RQM, ETM, EWM, CLM, ELM, RDNG, and DOORS Next are affected by CVE-2020-4525.
What is the potential impact of this vulnerability?
This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
Where can I find more information about CVE-2020-4525?
You can find more information about CVE-2020-4525 [here](https://exchange.xforce.ibmcloud.com/vulnerabilities/182435) and [here](https://www.ibm.com/support/pages/node/6255694).