Skip to content
Sign in
5.4 Medium

CVE-2021-29677 IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting

Description

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Security Verify Privilege Vault 10.9.66 No fix stated

Other CVEs of Security Verify Privilege Vault

The 3 CVEs of Security Verify Privilege Vault →
CVE-2021-29676 IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection 4.6 Medium CVE-2021-20583 IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) could disclose sensitive information through an HTTP… 6.2 Medium
Track this CVE