Cross site scripting

2016-09-0101:59:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product.

CPENameOperatorVersion
forms_experience_buildereq8.5.1.0
forms_experience_buildereq8.6.2.1
forms_experience_buildereq8.6.0.0
forms_experience_buildereq8.5.1.1
forms_experience_buildereq8.6.1
forms_experience_buildereq8.5.0.0
forms_experience_buildereq8.6.2
forms_experience_buildereq8.6.1.1

Name	Operator	Version
forms_experience_builder	eq	8.5.1.0
forms_experience_builder	eq	8.6.2.1
forms_experience_builder	eq	8.6.0.0
forms_experience_builder	eq	8.5.1.1
forms_experience_builder	eq	8.6.1
forms_experience_builder	eq	8.5.0.0
forms_experience_builder	eq	8.6.2
forms_experience_builder	eq	8.6.1.1