5.4
Medium
CVE-2020-4317 IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water…
Description
IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177355.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intelligent Operations Center 5.2 | 5.2 → 5.2.1 | No fix stated |
| Intelligent Operations Center 5.1 | 5.1.0 → 5.1.0.6 | No fix stated |
| Water Operations for Waternamics 5.2 | 5.2 → 5.2.1 | No fix stated |
| Water Operations for Waternamics 5.1 | 5.1.0 → 5.1.0.6 | No fix stated |
| Intelligent Operations Center for Emergency Management 5.1 | 5.1.0 → 5.1.0.6 | No fix stated |
Other CVEs of Intelligent Operations Center
The 10 CVEs of Intelligent Operations Center →
CVE-2020-4318
IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water…
5.4
Medium
CVE-2019-4321
IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 -…
5.9
Medium
CVE-2019-4419
IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack…
7.1
High
CVE-2019-4420
IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive…
6.2
Medium