Skip to content
Sign in
6.8 Medium

CVE-2024-28772 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored…

Description

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285645.

Affected products and versions

Product Affected versions Fixed in
Security Directory Integrator 7.2.0 No fix stated
Security Verify Directory Integrator 10.0.0 No fix stated

Other CVEs of Security Directory Integrator

The 10 CVEs of Security Directory Integrator →
CVE-2024-28765 IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote… 5.3 Medium CVE-2024-28766 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive… 2.4 Low CVE-2024-28770 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure… 4.8 Medium CVE-2024-28771 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure… 4.8 Medium
Track this CVE