Skip to content
Sign in
6.1 Medium

CVE-2019-4725 IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting

Description

IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131.

Affected products and versions

Product Affected versions Fixed in
Security Access Manager Appliance 9.0 No fix stated

Other CVEs of Security Access Manager Appliance

The 16 CVEs of Security Access Manager Appliance →
CVE-2020-4395 IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an… 6.3 Medium CVE-2020-4461 IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing… 6.5 Medium CVE-2019-4707 IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when… 7.1 High CVE-2018-1803 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 could allow a remote attacker to… 6.1 Medium
Track this CVE