Cross site scripting

2018-12-1316:29:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

JSON

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for Enterprise Single-Sign On is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150019.

CPENameOperatorVersion
security_access_managerge9.0.1.0
security_access_managerle9.0.5.0

CPE	Name	Operator	Version
	security_access_manager	ge	9.0.1.0
	security_access_manager	le	9.0.5.0

References

www.ibm.com/support/docview.wss?uid=ibm10787785

exchange.xforce.ibmcloud.com/vulnerabilities/150019