Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-14711
HistoryDec 28, 2021 - 12:00 a.m.

IBM OPENBMC Cross-Site Scripting Vulnerability

2021-12-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
ibm openbmc
cross-site scripting
vulnerability
op910
data validation
javascript code

EPSS

0.001

Percentile

30.5%

IBM OPENBMC is a POWER8 and POWER9 emulator from International Business Machines Corporation (Ibm), Inc. A cross-site scripting vulnerability exists in the OP910 version of IBM OPENBMC, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

30.5%

Related for CNVD-2022-14711