Aller au contenu
Se connecter
Non notée

CVE-2016-9704 IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting

Description

IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Produits et versions touchés

Produit Versions touchées Corrigé en
Identity Manager 7.0 Pas de correctif indiqué
Identity Manager 7 Pas de correctif indiqué
Identity Manager 6.0 Pas de correctif indiqué
Identity Manager 6 Pas de correctif indiqué
Identity Manager 5.1 Pas de correctif indiqué
Identity Manager 5.0 Pas de correctif indiqué

Autres CVE de Identity Manager

Les 3 CVE de Identity Manager →
CVE-2016-9703 IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized… Non notée CVE-2016-9739 IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a… Non notée
Suivre cette CVE