Not rated

CVE-2018-1502 IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting

Description

IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141338.

Affected products and versions

Product	Affected versions	Fixed in
Content Manager	8.5	No fix stated
Content Manager	8.4.3	No fix stated

Do you use Content Manager?

Track this CVE Watch Content Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2018-1502

Timeline

Published May 1, 2018
Last modified September 16, 2024

References

www-01.ibm.com www-01.ibm.com
1040760 www.securitytracker.com
ibm-icm-cve20181502-xss(141338) exchange.xforce.ibmcloud.com

Track this CVE