6.4
Medium
CVE-2021-39014 IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting
Description
IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213650.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Object Storage System | 3.15.8.97 | No fix stated |