Aller au contenu
Se connecter
6.1 Moyenne

CVE-2017-1772 IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting

Description

IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786.

Produits et versions touchés

Produit Versions touchées Corrigé en
MobileFirst Platform Foundation 8.0 Pas de correctif indiqué
MobileFirst Platform Foundation 7.1 Pas de correctif indiqué
MobileFirst Platform Foundation 7.0 Pas de correctif indiqué
MobileFirst Platform Foundation 6.3 Pas de correctif indiqué

Autres CVE de MobileFirst Platform Foundation

Les 3 CVE de MobileFirst Platform Foundation →
CVE-2020-4229 IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session,… 5.6 Moyenne CVE-2020-4226 IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters 5.9 Moyenne
Suivre cette CVE