Cross site scripting

2018-05-2913:29:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137777.

CPENameOperatorVersion
security_guardium_big_data_intelligenceeq3.1

CPE	Name	Operator	Version
	security_guardium_big_data_intelligence	eq	3.1

References

www.ibm.com/support/docview.wss?uid=swg22016512

exchange.xforce.ibmcloud.com/vulnerabilities/137777