Lucene search
China National Vulnerability DatabaseCNVD-2022-05121HistoryJul 14, 2021 - 12:00 a.m.
IBM Cloud Pak for Applications Cross-Site Scripting Vulnerability (CNVD-2022-05121)
2021-07-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
0.001 Low
EPSS
Percentile
19.6%
IBM Cloud Pak for Applications is an application from IBM USA, Inc. IBM Cloud Pak for Applications has a security vulnerability that stems from the fact that Cloud Pak for Applications allows users to embed arbitrary JavaScript code in the Web UI to change the intended functionality. An attacker could exploit the vulnerability to expose credentials in a trusted session.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm ibm cloud pak for applications | eq | 4.3 |
Related
cve
cve
CVE-2021-20366
2021-07-13 16:15:08
ibm
ibm
cvelist
cvelist
CVE-2021-20366
2021-07-12 00:00:00
nvd
nvd
CVE-2021-20366
2021-07-13 16:15:08
prion
prion
Cross site scripting
2021-07-13 16:15:00