Cross site scripting

2017-09-2801:29:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

JSON

IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132368.

CPENameOperatorVersion
datapower_gatewayeq7.1.0.1
datapower_gatewayeq7.0.0.5
datapower_gatewayeq7.0.0.1
datapower_gatewayeq7.0.0.3
datapower_gatewayeq7.1.0.2
datapower_gatewayeq7.0.0.0
datapower_gatewayeq7.1.0.6
datapower_gatewayeq7.2.0.0
datapower_gatewayeq7.0.0.7
datapower_gatewayeq7.1.0.4

Name	Operator	Version
datapower_gateway	eq	7.1.0.1
datapower_gateway	eq	7.0.0.5
datapower_gateway	eq	7.0.0.1
datapower_gateway	eq	7.0.0.3
datapower_gateway	eq	7.1.0.2
datapower_gateway	eq	7.0.0.0
datapower_gateway	eq	7.1.0.6
datapower_gateway	eq	7.2.0.0
datapower_gateway	eq	7.0.0.7
datapower_gateway	eq	7.1.0.4