Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-31908
HistoryMay 31, 2024 - 1:15 p.m.

CVE-2024-31908

2024-05-3113:15:09
CWE-79
[email protected]
web.nvd.nist.gov
5
nvd
cve-2024-31908
cross-site scripting
ibm planning analytics local
web ui
credentials disclosure
x-force id
289890

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

JSON

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 289890.

Related

cvelist 1
cve 1
ibm 1
cvelist
cvelist
CVE-2024-31908 IBM Planning Analytics Local cross-site scripting
2024-05-31 13:05:34
cve
cve
CVE-2024-31908
2024-05-31 13:15:09
ibm
ibm
Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components
2024-05-30 20:42:31

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for NVD:CVE-2024-31908
cvelist1cve1ibm1