CVE-2021-29673: XSS
IBM Engineering Workflow Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199482.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29673?
The severity of CVE-2021-29673 is medium with a CVSS score of 5.4.
How does CVE-2021-29673 affect IBM Engineering Workflow Management?
CVE-2021-29673 allows users to embed arbitrary JavaScript code in the Web UI of IBM Engineering Workflow Management, potentially leading to credentials disclosure within a trusted session.
Which versions of IBM Engineering Workflow Management are affected by CVE-2021-29673?
Versions 7.0.1 and 7.0.2 of IBM Engineering Workflow Management are affected by CVE-2021-29673.
How can I fix CVE-2021-29673 in IBM Engineering Workflow Management?
To fix CVE-2021-29673 in IBM Engineering Workflow Management, it is recommended to apply the necessary security patches provided by IBM.
Where can I find more information about CVE-2021-29673?
You can find more information about CVE-2021-29673 at the following links: [link1](https://exchange.xforce.ibmcloud.com/vulnerabilities/199482) [link2](https://www.ibm.com/support/pages/node/6508583)