Aller au contenu
Se connecter
6.4 Moyenne

CVE-2020-4987 The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and…

Description

The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Produits et versions touchés

Produit Versions touchées Corrigé en
FlashSystem 900 1.6.1.2 Pas de correctif indiqué
FlashSystem 900 1.5.2.8 Pas de correctif indiqué

Autres CVE de FlashSystem 900

Les 3 CVE de FlashSystem 900 →
CVE-2021-29873 IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service… 8.8 Élevée CVE-2018-1822 IBM FlashSystem 900 product GUI allows a specially crafted attack to bypass the authentication requirements of the… 9.8 Critique
Suivre cette CVE