6.1
Moyenne
CVE-2018-1947 IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site…
Description
IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153427.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Identity Governance and Intelligence 5.2 | 5.2 → 5.2.4.1 | Pas de correctif indiqué |
Autres CVE de Security Identity Governance and Intelligence
Les 38 CVE de Security Identity Governance and Intelligence →
CVE-2020-4970
IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain…
5.3
Moyenne
CVE-2020-4957
IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that…
5.3
Moyenne
CVE-2020-4996
IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the…
6.5
Moyenne
CVE-2020-4995
IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a…
4.0
Moyenne