Aller au contenu
Se connecter
4.4 Moyenne

CVE-2024-28775 IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting

Description

IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285648.

Produits et versions touchés

Produit Versions touchées Corrigé en
WebSphere Automation 1.7.0 Pas de correctif indiqué
websphere 1.7.0 Pas de correctif indiqué

Autres CVE de WebSphere Automation

Les 3 CVE de WebSphere Automation →
CVE-2024-54181 IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to… 7.2 Élevée CVE-2024-28764 IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection 6.5 Moyenne
Suivre cette CVE