47 matches found
IBM OPENBMC Cross-Site Scripting Vulnerability
IBM OPENBMC is a POWER8 and POWER9 emulator from International Business Machines Corporation Ibm. IBM OPENBMC has a cross-site scripting vulnerability in version OP910 that stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability...
CVE-2021-38961
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...
Cross site scripting
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...
CVE-2021-38961
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...
PT-2021-22335
Name of the Vulnerable Software and Affected Versions IBM OPENBMC OP910 affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...
CVE-2021-38961: Improper Neutralization of Input During Web Page Generation
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...
Security Bulletin: This Power System update is being released to address CVE 2021-38961
Summary POWER9: In response to a security issue with the BMC's web server, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2021-38961. Vulnerability Details CVEID: CVE-2021-38961 DESCRIPTION: IBM OPENBMC is vulnerable to...