Skip to content
Sign in
5.4 Medium

CVE-2018-1556 IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting

Description

IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142893.

Affected products and versions

Product Affected versions Fixed in
FileNet P8 Platform 5.5.0 No fix stated
FileNet P8 Platform 5.2.1 No fix stated

Other CVEs of FileNet P8 Platform

The 3 CVEs of FileNet P8 Platform →
CVE-2018-1542 IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform… 7.1 High CVE-2018-1555 IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting 5.4 Medium
Track this CVE