CVE-2025-33128

Name of the Vulnerable Software and Affected Versions IBM Engineering Workflow Management versions 7.0.3 through 7.0.3 Interim Fix 020 IBM Engineering Workflow Management versions 7.1 through 7.1 Interim Fix 007

Description An issue exists where an authenticated user can embed arbitrary JavaScript code in the Web UI. This cross-site scripting (XSS)—a technique where malicious scripts are injected into otherwise trusted websites—can alter intended functionality and potentially lead to the disclosure of credentials within a trusted session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.