Skip to content
Sign in
6.1 Medium

CVE-2017-1772 IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting

Description

IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786.

Affected products and versions

Product Affected versions Fixed in
MobileFirst Platform Foundation 8.0 No fix stated
MobileFirst Platform Foundation 7.1 No fix stated
MobileFirst Platform Foundation 7.0 No fix stated
MobileFirst Platform Foundation 6.3 No fix stated

Other CVEs of MobileFirst Platform Foundation

The 3 CVEs of MobileFirst Platform Foundation →
CVE-2020-4229 IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session,… 5.6 Medium CVE-2020-4226 IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters 5.9 Medium
Track this CVE