5.4
Moyenne
CVE-2021-39055 IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting
Description
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214534.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spectrum Copy Data Management 2.2 | 2.2.0.0 → 2.2.14.3 | Pas de correctif indiqué |
Autres CVE de Spectrum Copy Data Management
Les 17 CVE de Spectrum Copy Data Management →
CVE-2023-38730
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that…
5.9
Moyenne
CVE-2022-31769
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration…
5.3
Moyenne
CVE-2022-30611
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper…
5.4
Moyenne
CVE-2022-30610
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a…
4.4
Moyenne