Skip to content
Sign in
4.3 Not rated

CVE-2014-0883 IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting

Description

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  91163.

Affected products and versions

Product Affected versions Fixed in
Power HMC 7.3.5 No fix stated
Power HMC 7.1 7.1.0 → 7.8.0 No fix stated

Other CVEs of Power HMC

The 3 CVEs of Power HMC →
CVE-2023-38280 IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their… 8.4 High CVE-2021-29707 IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to… 8.4 High
Track this CVE