Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1761 matches found

Prion
Prion•added 2018/05/07 1:29 p.m.•27 views

Cross site scripting

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138819...

3.5CVSS5.1AI score0.01086EPSS
SaveExploits0References6Affected Software1
NVD
NVD•added 2018/05/07 1:29 p.m.•35 views

CVE-2018-1413

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138819...

5.4CVSS5.2AI score0.01086EPSS
SaveExploits0References6
Cvelist
Cvelist•added 2018/05/07 1:00 p.m.•38 views

CVE-2018-1413

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138819...

5.2AI score0.01086EPSS
SaveExploits0References6
OSV
OSV•added 2018/05/01 2:29 p.m.•9 views

CVE-2018-1502

IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.4AI score0.00949EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2018/05/01 2:00 p.m.•31 views

CVE-2018-1502

IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.2AI score0.00949EPSS
SaveExploits0References3
NVD
NVD•added 2018/04/30 2:29 p.m.•29 views

CVE-2018-1430

IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139226...

5.4CVSS5.2AI score0.00949EPSS
SaveExploits0References3
Prion
Prion•added 2018/04/27 3:29 p.m.•29 views

Cross site scripting

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140691...

4.3CVSS5.6AI score0.00894EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2018/04/27 3:29 p.m.•28 views

CVE-2018-1473

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140691...

6.1CVSS5.8AI score0.00894EPSS
SaveExploits0References2
NVD
NVD•added 2018/04/26 2:29 p.m.•29 views

CVE-2017-1724

IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134814...

6.1CVSS5.8AI score0.00683EPSS
SaveExploits0References2
Prion
Prion•added 2018/04/25 1:29 p.m.•21 views

Cross site scripting

IBM Jazz Reporting Service JRS 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

3.5CVSS5.2AI score0.00949EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2018/04/25 1:00 p.m.•32 views

CVE-2017-1750

IBM Jazz Reporting Service JRS 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.2AI score0.00949EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2018/04/23 1:00 p.m.•31 views

CVE-2017-1486

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.8AI score0.00894EPSS
SaveExploits0References2
Prion
Prion•added 2018/04/20 9:29 p.m.•21 views

Cross site scripting

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...

4.3CVSS6.4AI score0.00654EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2018/04/20 9:29 p.m.•32 views

CVE-2014-0883

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...

6.1CVSS5.9AI score0.00654EPSS
SaveExploits0References2
Prion
Prion•added 2018/04/12 3:29 p.m.•29 views

Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

3.5CVSS5.2AI score0.0054EPSS
SaveExploits0References2Affected Software2
Prion
Prion•added 2018/04/11 4:29 p.m.•30 views

Cross site scripting

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140918...

4.3CVSS5.7AI score0.01274EPSS
SaveExploits0References3Affected Software1
NVD
NVD•added 2018/04/04 6:29 p.m.•26 views

CVE-2017-1772

IBM Worklight IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.8AI score0.01274EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2018/04/04 6:00 p.m.•40 views

CVE-2017-1772

IBM Worklight IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.8AI score0.01274EPSS
SaveExploits0References3
OSV
OSV•added 2018/03/30 4:29 p.m.•11 views

CVE-2018-1384

IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135...

5.4CVSS5.4AI score0.01035EPSS
SaveExploits0References4
NVD
NVD•added 2018/03/30 4:29 p.m.•30 views

CVE-2017-1767

IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136152...

5.4CVSS5.2AI score0.01035EPSS
SaveExploits0References4
Rows per page
Query Builder