CVE-2020-4698

IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186841.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/186841VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6326825Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/186841VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6326825Patch, Vendor Advisory

Published

Sep 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-4691IBM Jazz Foundation Products are vulnerable to cross-site sc…5.4
• CVE-2020-4692IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through…6.5
• CVE-2020-4693IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1…9.8
• CVE-2020-4695IBM API Connect V10 is impacted by insecure communications d…7.5
• CVE-2020-4696IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate…4.3
• CVE-2020-4697IBM Jazz Foundation products are vulnerable to cross-site sc…5.4
• CVE-2020-4699IBM Security Access Manager 9.0.7 and IBM Security Verify Ac…5.3
• CVE-2020-4700IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through…8.8
• CVE-2020-4701IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…7.8
• CVE-2020-4702IBM InfoSphere Information Server 11.7 is vulnerable to stor…5.4
• CVE-2020-4703IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrati…8
• CVE-2020-4704IBM Content Navigator 3.0CD is vulnerable to stored cross-si…5.4