CVE:CVE-2023-22860
CNNVD:CNNVD-202302-2110
IBM Cloud Pak for Business Automation是美国国际商业机器（IBM）公司的一组模块化的集成软件组件，专为任何混合云而构建，旨在实现工作自动化和加速业务增长。
IBM Cloud Pak for Business Automation 18.0.0、18.0.1、18.0.2、19.0.1、19.0.2、19.0.3、20.0.1、20.0.2、20.0.3、21.0.1、21.0.2、 21.0.3、22.0.1 和 22.0.2版本存在跨站脚本漏洞，该漏洞源于允许用户在 Web UI 中嵌入任意 JavaScript 代码，从而导致受信任会话中的凭据泄露。
solution:Upgrade ibm cloud_pak_for_business_automation to a higher version than 18.0.0,18.0.2,19.0.1,19.0.3,20.0.1,20.0.3,21.0.1,21.0.1:interim_fix_001,21.0.1:interim_fix_002,21.0.1:interim_fix_003,21.0.1:interim_fix_004,21.0.1:interim_fix_005,21.0.1:interim_fix_006,21.0.1:interim_fix_007,21.0.2,21.0.2:interim_fix_001,21.0.2:interim_fix_0012,21.0.2:interim_fix_002,21.0.2:interim_fix_003,21.0.2:interim_fix_004,21.0.2:interim_fix_005,21.0.2:interim_fix_006,21.0.2:interim_fix_007,21.0.2:interim_fix_008,21.0.2:interim_fix_009,21.0.2:interim_fix_010,21.0.2:interim_fix_011,21.0.2:interim_fix_012,21.0.3,21.0.3:interim_fix_001,21.0.3:interim_fix_002,21.0.3:interim_fix_003,21.0.3:interim_fix_004,21.0.3:interim_fix_005,21.0.3:interim_fix_006,21.0.3:interim_fix_007,21.0.3:interim_fix_008,21.0.3:interim_fix_009,21.0.3:interim_fix_010,21.0.3:interim_fix_011,21.0.3:interim_fix_012,21.0.3:interim_fix_013,21.0.3:interim_fix_014,21.0.3:interim_fix_015,21.0.3:interim_fix_016,21.0.3:interim_fix_017,22.0.1,22.0.1:interim_fix_001,22.0.1:interim_fix_002,22.0.1:interim_fix_003,22.0.1:interim_fix_004,22.0.1:interim_fix_005,22.0.1:interim_fix_006,22.0.2,22.0.2:interim_fix_001,and avoid the version 18.0.0,18.0.2,19.0.1,19.0.3,20.0.1,20.0.3,21.0.1,21.0.1:interim_fix_001,21.0.1:interim_fix_002,21.0.1:interim_fix_003,21.0.1:interim_fix_004,21.0.1:interim_fix_005,21.0.1:interim_fix_006,21.0.1:interim_fix_007,21.0.2,21.0.2:interim_fix_001,21.0.2:interim_fix_0012,21.0.2:interim_fix_002,21.0.2:interim_fix_003,21.0.2:interim_fix_004,21.0.2:interim_fix_005,21.0.2:interim_fix_006,21.0.2:interim_fix_007,21.0.2:interim_fix_008,21.0.2:interim_fix_009,21.0.2:interim_fix_010,21.0.2:interim_fix_011,21.0.2:interim_fix_012,21.0.3,21.0.3:interim_fix_001,21.0.3:interim_fix_002,21.0.3:interim_fix_003,21.0.3:interim_fix_004,21.0.3:interim_fix_005,21.0.3:interim_fix_006,21.0.3:interim_fix_007,21.0.3:interim_fix_008,21.0.3:interim_fix_009,21.0.3:interim_fix_010,21.0.3:interim_fix_011,21.0.3:interim_fix_012,21.0.3:interim_fix_013,21.0.3:interim_fix_014,21.0.3:interim_fix_015,21.0.3:interim_fix_016,21.0.3:interim_fix_017,22.0.1,22.0.1:interim_fix_001,22.0.1:interim_fix_002,22.0.1:interim_fix_003,22.0.1:interim_fix_004,22.0.1:interim_fix_005,22.0.1:interim_fix_006,22.0.2,22.0.2:interim_fix_001