Skip to content
Sign in
5.4 Medium

CVE-2018-1706 IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting

Description

IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341.

Affected products and versions

Product Affected versions Fixed in
Spectrum Symphony 7.2.0.2 No fix stated

Other CVEs of Spectrum Symphony

The 7 CVEs of Spectrum Symphony →
CVE-2023-24975 IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST… 5.4 Medium CVE-2018-1708 IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as… 6.5 Medium CVE-2018-1702 IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML… 7.1 High CVE-2018-1704 IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker… 6.8 Medium
Track this CVE