Skip to content
Sign in
5.4 Medium

CVE-2021-20559 IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting

Description

IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199228.

Affected products and versions

Product Affected versions Fixed in
Control Desk 7.6 7.6.1.2 → 7.6.1.3 No fix stated

Other CVEs of Control Desk

The 3 CVEs of Control Desk →
CVE-2022-22330 IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the… 3.7 Low CVE-2022-22329 IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies 4.3 Medium
Track this CVE