Skip to content
Sign in
6.1 Medium

CVE-2018-1947 IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site…

Description

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153427.

Affected products and versions

Product Affected versions Fixed in
Security Identity Governance and Intelligence 5.2 5.2 → 5.2.4.1 No fix stated

Other CVEs of Security Identity Governance and Intelligence

The 38 CVEs of Security Identity Governance and Intelligence →
CVE-2020-4970 IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain… 5.3 Medium CVE-2020-4957 IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that… 5.3 Medium CVE-2020-4996 IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the… 6.5 Medium CVE-2020-4995 IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a… 4.0 Medium
Track this CVE