CVE-2019-4403

IBM Connections 6.0 is affected by a cross-site scripting (XSS) vulnerability in the Web UI, allowing an attacker to embed arbitrary JavaScript to alter functionality and potentially disclose credentials within a trusted session. The root cause cited in CNVD-2019-19316 is lack of proper validatio...