Lucene search

IBMC707DF514A73CB775A86012FE8A785B4445ABA20ACC07FECA82F5CD9EFD55432

HistoryMay 30, 2023 - 6:46 p.m.

Security Bulletin: IBM Security Verify Governance, Identity Manager software component ships IBM WebSphere Application Server, which is vulnerable to cross site scripting

2023-05-3018:46:21

www.ibm.com

ibm

security verify governance

identity manager

software component

cross site scripting

websphere application server

vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.0%

JSON

Summary

IBM WebSphere Application Server (WAS) is shipped with IBM Security Verify Governance, Identity Manager software component (SVGSS). Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Security Verify Governance, Identity Manager software component	10.0

Remediation/Fixes

IBM encourages customers to update their systems promptly.

Version

| Principal Product and Version(s)|Affected Supporting Product and Version(s)|Affected Supporting Product Security Bulletin
—|—|—|—
10.0.1| IBM Security Verify Governance, Identity Manager software component| WAS 9|

Security Bulletin:IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2023-26283 )

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmsecurity_identity_managerMatch10.0

VendorProductVersionCPE
ibmsecurity_identity_manager10.0cpe:2.3:a:ibm:security_identity_manager:10.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	security_identity_manager	10.0	cpe:2.3:a:ibm:security_identity_manager:10.0:::::::*