4.8
Moyenne
CVE-2023-33840 IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting
Description
IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Verify Governance | 10.0 | Pas de correctif indiqué |
Autres CVE de Security Verify Governance
Les 19 CVE de Security Verify Governance →
CVE-2024-22330
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes…
5.9
Moyenne
CVE-2023-33844
IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2023-33838
IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should…
4.4
Moyenne
CVE-2023-35017
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be…
5.9
Moyenne