5.3
Medium
CVE-2024-45642 IBM Security ReaQta 3.12 is vulnerable to cross-site scripting
Description
IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security ReaQta | 3.12 | No fix stated |
Other CVEs of Security ReaQta
The 4 CVEs of Security ReaQta →
CVE-2024-45644
IBM Security ReaQta 3.12 allows a privileged user to upload or transfer files of dangerous types that can be…
4.7
Medium
CVE-2024-45654
IBM Security ReaQta 3.12 could allow an authenticated user to perform unauthorized actions due to reliance on…
4.3
Medium
CVE-2024-45099
IBM Security ReaQta 3.12 is vulnerable to cross-site scripting
3.1
Low