Lucene search
China National Vulnerability DatabaseCNVD-2022-77519HistorySep 27, 2022 - 12:00 a.m.
IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2022-77519)
2022-09-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
ibm infosphere information server
cross-site scripting
vulnerability
version 11.7
javascript code
web ui
credential leakage
trusted session
0.001 Low
EPSS
Percentile
19.8%
IBM InfoSphere Information Server is a data integration platform from International Business Machines (IBM). The platform can be used to integrate data information obtained from various sources.A security vulnerability exists in IBM InfoSphere Information Server version 11.7. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI, which could alter the intended functionality and lead to credential leakage in a trusted session.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm infosphere information server | eq | 11.7 |
Related
cve
cve
CVE-2022-40748
2022-09-23 18:15:11
prion
prion
Cross site scripting
2022-09-23 18:15:00
cvelist
cvelist
CVE-2022-40748
2022-09-22 00:00:00
ibm
ibm
nvd
nvd
CVE-2022-40748
2022-09-23 18:15:11