IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2022-54639)

IBM Security Guardium is a suite of data protection features from IBM. The platform includes features such as custom UI, report management, and streamlined audit process building. IBM Security Guardium version 11.4 has a cross-site scripting vulnerability that stems from allowing users to embed arbitrary JavaScript code in the Web UI to change the intended functionality, which could be exploited by an attacker to cause credential disclosure in a trusted session.