Lucene search
+L

5088 matches found

Cvelist
Cvelist
added 2023/02/01 5:42 p.m.34 views

CVE-2022-47983 IBM InfoSphere Information Server cross-site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/02/01 12:00 a.m.7 views

IBM InfoSphere Information Server 跨站脚本漏洞

IBM InfoSphere Information Server is a data integration platform from International Business Machines Corporation IBM. IBM InfoSphere Information Server version 11.7 contains a cross-site scripting vulnerability that allows users to embed arbitrary JavaScript code in the Web UI via cross-site...

5.4CVSS6AI score0.00434EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/31 4:20 p.m.39 views

Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to cross-site scripting ( CVE-2022-46771 )

Summary IBM UrbanCode Deploy UCD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details...

4.6CVSS4.6AI score0.00371EPSS
SaveExploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 11:45 p.m.6 views

Malicious code in tiaa-web-ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6307bc57608579648ccf1b24d5afbcd0d7f3c15e8c8da97a2a0d1a6a6e059fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 11:45 p.m.8 views

MAL-2023-888 Malicious code in tiaa-web-ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6307bc57608579648ccf1b24d5afbcd0d7f3c15e8c8da97a2a0d1a6a6e059fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Prion
Prion
added 2023/01/18 7:15 p.m.21 views

Cross site scripting

IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

4.9CVSS5.2AI score0.00371EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2023/01/18 6:41 p.m.29 views

CVE-2023-22594 IBM Robotic Process Automation for Cloud Pak cross-site scripting

IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

4.6CVSS5.4AI score0.00371EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2023/01/12 8:25 a.m.19 views

client and idm:DL1 bug fix and enhancement update

An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

1.5AI score
SaveExploits0
CNVD
CNVD
added 2023/01/11 12:00 a.m.45 views

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2023-05238)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting...

6.1CVSS5.9AI score0.00392EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/06 12:00 a.m.34 views

IBM Sterling B2B Integrator Standard Edition Cross-Site Scripting Vulnerability (CNVD-2023-05243)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1. An attacker could exploit the...

5.4CVSS5.3AI score0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/05 7:15 a.m.28 views

CVE-2022-34330

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.8AI score0.00392EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/05 7:15 a.m.17 views

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.8CVSS5.7AI score0.00392EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/01/04 6:15 p.m.16 views

CVE-2022-22352

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.2AI score0.00365EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/04 6:15 p.m.16 views

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

4.9CVSS5.2AI score0.00365EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/01/04 5:07 p.m.89 views

CVE-2022-34330

Summary: CVE-2022-34330 affects IBM Sterling B2B Integrator Standard Edition 6.0.0.0–6.1.2.1 and is a cross-site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. Affected product/versions: IBM Sterling B2B Integrator Standard Edition 6.0.0.0–...

6.1CVSS5.8AI score0.00392EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/01/04 5:07 p.m.24 views

CVE-2022-34330 IBM Sterling B2B Integrator cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.9AI score0.00392EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/01/04 12:00 a.m.6 views

PT-2023-12688 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

5.4CVSS5.5AI score0.00365EPSS
SaveExploits0References4
CNVD
CNVD
added 2022/12/23 12:00 a.m.65 views

IBM Security Verify Governance Identity Manager Cross-Site Scripting Vulnerability

IBM Security Verify Governance Identity Manager is an IBM network appliance-based integration that focuses on business-centric rules, activities, and processes. version 10.0.1 of IBM Security Verify Governance Identity Manager is vulnerable to A cross-site scripting vulnerability exists. An...

6.1CVSS2.1AI score0.00301EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/22 10:15 p.m.29 views

CVE-2022-22456

IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

6.1CVSS0.00301EPSS
SaveExploits0References2
Prion
Prion
added 2022/12/22 10:15 p.m.25 views

Cross site scripting

IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.8CVSS5.7AI score0.00301EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder