Cross site scripting

2017-02-0122:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.3%

JSON

IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.

CPENameOperatorVersion
infosphere_datastageeq9.1
infosphere_datastageeq11.5
infosphere_datastageeq8.7
infosphere_datastageeq11.3
infosphere_information_server_on_cloudeq11.5