Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5170 matches found

Prion
Prion•added 2017/06/07 5:29 p.m.•16 views

Cross site scripting

IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

4.3CVSS5.8AI score0.00977EPSS
SaveExploits0References3Affected Software1
OSV
OSV•added 2017/06/07 5:29 p.m.•5 views

CVE-2017-1305

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.4AI score0.00729EPSS
SaveExploits0References3
OSV
OSV•added 2017/06/07 5:29 p.m.•11 views

CVE-2017-1178

IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

6.1CVSS5.4AI score0.00977EPSS
SaveExploits0References3
NVD
NVD•added 2017/06/07 5:29 p.m.•40 views

CVE-2017-1178

IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

6.1CVSS5.9AI score0.00977EPSS
SaveExploits0References3
Prion
Prion•added 2017/06/07 5:29 p.m.•15 views

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

3.5CVSS5.2AI score0.00729EPSS
SaveExploits0References3Affected Software1
NVD
NVD•added 2017/06/07 5:29 p.m.•18 views

CVE-2017-1305

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3
CVE
CVE•added 2017/06/07 5:0 p.m.•48 views

CVE-2017-1305

IBM DOORS Next Generation (DNG/RRC) 6.0.2–6.0.3 is affected by a cross-site scripting vulnerability in the Web UI that can allow arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. Mitigation: upgrade to 6.0.3 iFix005 or later (or 6.0.2 iFix011 or later).

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/06/07 5:0 p.m.•27 views

CVE-2017-1178

IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

6.2AI score0.00977EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/06/07 5:0 p.m.•23 views

CVE-2017-1305

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.2AI score0.00729EPSS
SaveExploits0References3
OpenVAS
OpenVAS•added 2017/05/29 12:0 a.m.•22 views

IBM iNotes Cross-Site Scripting Vulnerability (May 2017)

IBM iNotes is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...

6.1CVSS6AI score0.00846EPSS
SaveExploits0References1
Prion
Prion•added 2017/05/26 4:29 p.m.•14 views

Cross site scripting

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125976...

4.3CVSS5.7AI score0.00846EPSS
SaveExploits0References3Affected Software1
OSV
OSV•added 2017/05/26 4:29 p.m.•6 views

CVE-2017-1325

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125976...

6.1CVSS5.4AI score0.00846EPSS
SaveExploits0References3
NVD
NVD•added 2017/05/26 4:29 p.m.•21 views

CVE-2017-1325

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125976...

6.1CVSS5.8AI score0.00846EPSS
SaveExploits0References3
CVE
CVE•added 2017/05/26 4:0 p.m.•52 views

CVE-2017-1325

The provided documents describe CVE-2017-1325 as a cross-site scripting vulnerability in IBM iNotes 8.5 and 9.0. The issue permits embedding arbitrary JavaScript in the Web UI, potentially altering functionality and leading to credentials disclosure within a trusted session. The NVD entry offers ...

6.1CVSS5.8AI score0.00846EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/05/26 4:0 p.m.•26 views

CVE-2017-1325

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125976...

5.8AI score0.00846EPSS
SaveExploits0References3
NVD
NVD•added 2017/05/22 8:29 p.m.•18 views

CVE-2017-1320

IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125732...

5.4CVSS5.5AI score0.00516EPSS
SaveExploits0References2
Prion
Prion•added 2017/05/22 8:29 p.m.•14 views

Cross site scripting

IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760...

3.5CVSS5.1AI score0.00538EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2017/05/22 8:29 p.m.•16 views

CVE-2017-1282

IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760...

5.4CVSS5.2AI score0.00538EPSS
SaveExploits0References2
CVE
CVE•added 2017/05/22 8:0 p.m.•57 views

CVE-2017-1320

IBM Tivoli Federated Identity Manager 6.2.x is affected by CVE-2017-1320 (XSS in Web UI) per IBM/SWG bulletin. Affected versions include 6.2.0, 6.2.1, and 6.2.2.x (up to 6.2.2.17). Remediation is to apply patch 6.2.2-FP0017 or upgrade to 6.2.2.17, per IBM’s remediation table. CVSS v3.0 vector (AV...

5.4CVSS5.1AI score0.00516EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2017/05/22 8:0 p.m.•48 views

CVE-2017-1282

IBM Content Navigator (CMIS 2.0/3.0) is affected by a cross-site scripting vulnerability (CVE-2017-1282). The issue allows attackers to inject arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure in a trusted session. Affected versions are IBM Content Navigator 2.0....

5.4CVSS5.2AI score0.00538EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder