CVE-2020-4640: Exposure of Sensitive Information to an Unauthorized Actor

Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate nodes like proxy servers, cdn, logging platforms, etc. An attacker can make u...

PT-2021-12146

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.0.0 through 10.0.1.0 IBM API Connect versions 2018.4.1.0 through 2018.4.1.13 Description Certain configurations can result in sensitive information being stored in URL fragment identifiers, which can be cached by...

CVE-2018-6076: Improper Neutralization of Input During Web Page Generation

Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page...

KLA11204 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities possibly to cause denial of service or spoof user interface. Below is a complete list of vulnerabilities: 1. Incorrect processing of AppMenifests can be exploited remotely to perfo...

PT-2018-17347

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to insufficient encoding of URL fragment identifiers in Blink, which allowed a remote attacker to perform a DOM based XSS atta...