Lucene search

PRIOn knowledge basePRION:CVE-2022-43909

HistoryAug 27, 2023 - 11:15 p.m.

Cross site scripting

2023-08-2723:15:00

PRIOn knowledge base

www.prio-n.com

ibm

security guardium

cross-site scripting

web ui

credentials disclosure

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 240905.

CPENameOperatorVersion
security_guardiumeq11.4

CPE	Name	Operator	Version
	security_guardium	eq	11.4

References

exchange.xforce.ibmcloud.com/vulnerabilities/240905

www.ibm.com/support/pages/node/7028511