6.8
Moyenne
CVE-2024-28772 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored…
Description
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285645.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Directory Integrator | 7.2.0 | Pas de correctif indiqué |
| Security Verify Directory Integrator | 10.0.0 | Pas de correctif indiqué |
Autres CVE de Security Directory Integrator
Les 10 CVE de Security Directory Integrator →
CVE-2024-28765
IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote…
5.3
Moyenne
CVE-2024-28766
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive…
2.4
Faible
CVE-2024-28770
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure…
4.8
Moyenne
CVE-2024-28771
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure…
4.8
Moyenne