6.1
Moyenne
CVE-2025-0719 IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting
Description
IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cloud Pak for Data | 5.0.0 | Pas de correctif indiqué |
| Cloud Pak for Data 4.0 | 4.0.0 → 4.8.5 | Pas de correctif indiqué |
Autres CVE de Cloud Pak for Data
Les 6 CVE de Cloud Pak for Data →
CVE-2025-14754
IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on…
8.8
Élevée
CVE-2025-14753
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system
7.5
Élevée
CVE-2022-36769
IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can…
7.2
Élevée
CVE-2021-38899
IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information
4.4
Moyenne