Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55503
HistoryJul 18, 2022 - 12:00 a.m.

IBM Engineering Lifecycle Optimization跨站脚本漏洞(CNVD-2022-55503)

2022-07-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
ibm engineering lifecycle optimization
cross-site scripting
data validation
user-supplied data
javascript code
security vulnerability
third-party tools

EPSS

0.001

Percentile

19.6%

IBM Engineering Lifecycle Optimization (ELO) is an extension of the Engineering Lifecycle Management (ELM) product portfolio from IBM USA. They make it easier to collect and analyze data from across the development environment to make better decisions. Automate reporting to ensure the entire organization has the information it needs to optimize development, define processes that can help your extension team adopt and follow best practices, and interface with third-party tools to customize your development environment.IBM Engineering Lifecycle Optimization has a cross-site scripting vulnerability that stems from the program’s lack of data validation filtering of user-supplied data and The vulnerability stems from the program’s lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

19.6%

Related for CNVD-2022-55503