Skip to content
Sign in
Not rated

CVE-2017-1178 IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting

Description

IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123430.

Affected products and versions

Product Affected versions Fixed in
Endpoint Manager for Security and Compliance 1.9.70 No fix stated

Other CVEs of Endpoint Manager for Security and Compliance

The 2 CVEs of Endpoint Manager for Security and Compliance →
CVE-2017-1196 IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default,… Not rated
Track this CVE