CVSS 5.4 · Medium EPSS 0,23%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada ibm engineering workflow management. Skor CVSS 3.1 5.4 (Medium) menurut us.ibm.com.
IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | engineering workflow management | Versi 7.0.3 |
| ibm | engineering workflow management | Versi 7.0.3 ifix001 |
| ibm | engineering workflow management | Versi 7.0.3 ifix002 |
| ibm | engineering workflow management | Versi 7.0.3 ifix003 |
| ibm | engineering workflow management | Versi 7.0.3 ifix004 |
| ibm | engineering workflow management | Versi 7.0.3 ifix005 |
| ibm | engineering workflow management | Versi 7.0.3 ifix006 |
| ibm | engineering workflow management | Versi 7.0.3 ifix007 |
| ibm | engineering workflow management | Versi 7.0.3 ifix008 |
| ibm | engineering workflow management | Versi 7.0.3 ifix009 |
| ibm | engineering workflow management | Versi 7.0.3 ifix010 |
| ibm | engineering workflow management | Versi 7.0.3 ifix011 |
| ibm | engineering workflow management | Versi 7.0.3 ifix012 |
| ibm | engineering workflow management | Versi 7.0.3 ifix013 |
| ibm | engineering workflow management | Versi 7.0.3 ifix014 |
| ibm | engineering workflow management | Versi 7.0.3 ifix015 |
| ibm | engineering workflow management | Versi 7.0.3 ifix016 |
| ibm | engineering workflow management | Versi 7.0.3 ifix017 |
| ibm | engineering workflow management | Versi 7.0.3 ifix018 |
| ibm | engineering workflow management | Versi 7.0.3 ifix019 |
| ibm | engineering workflow management | Versi 7.0.3 ifix020 |
| ibm | engineering workflow management | Versi 7.1.0 |
| ibm | engineering workflow management | Versi 7.1.0 ifix001 |
| ibm | engineering workflow management | Versi 7.1.0 ifix002 |
| ibm | engineering workflow management | Versi 7.1.0 ifix003 |
| ibm | engineering workflow management | Versi 7.1.0 ifix004 |
| ibm | engineering workflow management | Versi 7.1.0 ifix005 |
| ibm | engineering workflow management | Versi 7.1.0 ifix006 |
| ibm | engineering workflow management | Versi 7.1.0 ifix007 |