Lucene search
China National Vulnerability DatabaseCNVD-2022-91127HistoryDec 23, 2022 - 12:00 a.m.
IBM Security Verify Governance Identity Manager Cross-Site Scripting Vulnerability
2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
ibm
security
verify
governance
identity manager
cross-site scripting
vulnerability
network appliance
integration
business-centric rules
arbitrary javascript code
web ui
credential disclosure
trusted sessions
cnvd
0.001 Low
EPSS
Percentile
26.1%
IBM Security Verify Governance Identity Manager is an IBM network appliance-based integration that focuses on business-centric rules, activities, and processes. version 10.0.1 of IBM Security Verify Governance Identity Manager is vulnerable to A cross-site scripting vulnerability exists. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI to change the intended functionality, which could lead to credential disclosure in trusted sessions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm ibm security verify governance identity manager | eq | 10.0.1 |
Related
nvd
nvd
CVE-2022-22456
2022-12-22 22:15:12
cve
cve
CVE-2022-22456
2022-12-22 22:15:12
prion
prion
Cross site scripting
2022-12-22 22:15:00
cvelist
cvelist
