Lucene search
PRIOn knowledge basePRION:CVE-2022-36776HistoryNov 11, 2022 - 7:15 p.m.
Cross site scripting
2022-11-1119:15:00
PRIOn knowledge base
www.prio-n.com
5
ibm cloud pak
security
cp4s
cross-site scripting
vulnerability
javascript
web ui
credentials disclosure
trusted session
nvd
0.001 Low
EPSS
Percentile
19.6%
IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 233663.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloud_pak_for_security | ge | 1.10.0.0 | |
| cloud_pak_for_security | le | 1.10.2.0 |
Related
cve
cve
CVE-2022-36776
2022-11-11 19:15:10
cnvd
cnvd
cvelist
cvelist
CVE-2022-36776
2022-11-11 18:44:09
nvd
nvd
CVE-2022-36776
2022-11-11 19:15:10
