Skip to content
Sign in
Not rated

CVE-2017-1345 IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting

Description

IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126460.

Affected products and versions

Product Affected versions Fixed in
Insights Foundation for Energy 2.0 No fix stated

Other CVEs of Insights Foundation for Energy

The 3 CVEs of Insights Foundation for Energy →
CVE-2017-1342 IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users… Not rated CVE-2017-1311 IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection Not rated
Track this CVE