5216 matches found
Security Bulletin: IBM CICS TX Standard is vulnerable to a stored cross-site scripting attack (CVE-2022-34167)
Summary IBM CICS TX Standard could allow users to embed arbitrary JavaScript code which may allow trusted credentials disclosure. The fix removes this vulnerability CVE-2022-34167 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34167 DESCRIPTION: IBM CICS TX is vulnerable to store...
Security Bulletin: IBM CICS TX Standard is vulnerable to a cross-site scripting attack (CVE-2022-34315).
Summary IBM CICS TX Standard could allow a cross-site scripting vulnerability to be exploited. The fix removes this vulnerability CVE-2022-34315 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34315 DESCRIPTION: IBM CICS TX is vulnerable to cross-site scripting. This vulnerability...
Security Bulletin: IBM CICS TX Advanced is vulnerable to cross-site scripting (CVE-2022-34166)
Summary IBM CICS TX Advanced could allow users to embed arbitrary JavaScript code which may allow trusted credentials disclosure. The fix removes this vulnerability CVE-2022-34166 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34166 DESCRIPTION: IBM CICS TX is vulnerable to...
Security Bulletin: IBM CICS TX Advanced is vulnerable to a stored cross-site scripting attack (CVE-2022-34167)
Summary IBM CICS TX Advanced could allow users to embed arbitrary JavaScript code which may allow trusted credentials disclosure. The fix removes this vulnerability CVE-2022-34167 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34167 DESCRIPTION: IBM CICS TX is vulnerable to store...
CVE-2023-23475
IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423...
Cross site scripting
IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423...
CVE-2023-23475
IBM Infosphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Affected product/version: InfoSphere Information Server 11.7. IBM’s sec...
CVE-2023-23475 IBM Infosphere Information Server cross-site scripting
IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423...
CVE-2023-23475 IBM Infosphere Information Server cross-site scripting
IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423...
Microsoft Azure Machine Learning Service JWT Cleartext Storage of Credentials Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on Microsoft Azure. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of JWT tokens within Azure Machine Learning Service workbooks. The issue results from storing...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2022-47983)
Summary A cross-site scripting vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-47983 DESCRIPTION: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in...
Cross site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161...
CVE-2022-47983 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161...
CVE-2022-47983 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161...
Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to cross-site scripting ( CVE-2022-46771 )
Summary IBM UrbanCode Deploy UCD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details...
CVE-2023-22594
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
Cross site scripting
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2023-22594 IBM Robotic Process Automation for Cloud Pak cross-site scripting
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2023-22594 IBM Robotic Process Automation for Cloud Pak cross-site scripting
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2022-34330
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...