Aller au contenu
Se connecter
5.4 Moyenne

CVE-2021-20559 IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting

Description

IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199228.

Produits et versions touchés

Produit Versions touchées Corrigé en
Control Desk 7.6 7.6.1.2 → 7.6.1.3 Pas de correctif indiqué

Autres CVE de Control Desk

Les 3 CVE de Control Desk →
CVE-2022-22330 IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the… 3.7 Faible CVE-2022-22329 IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies 4.3 Moyenne
Suivre cette CVE