CVE-2021-38952

IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI. The issue enables an attacker to inject arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. Root cause cited in publ...