Cross-Site Scripting Vulnerability in IBM Security Access Manager Appliance
CVE-2018-1815

6.1MEDIUM

Key Information:

Vendor
IBM
Status
Security Access Manager Appliance
Vendor
CVE Published:
13 December 2018

Summary

The IBM Security Access Manager Appliance versions 9.0.1.0 through 9.0.5.0 are affected by a cross-site scripting issue that permits attackers to inject arbitrary JavaScript into the Web UI. This vulnerability could potentially compromise user credentials during logged-in sessions, as it manipulates the application's expected behavior. Proper mitigation strategies are essential to prevent unauthorized access.

Affected Version(s)

Security Access Manager Appliance 9.0.1.0

Security Access Manager Appliance 9.0.2.0

Security Access Manager Appliance 9.0.3.0

References

http://www.ibm.com/support/docview.wss?uid=ibm10787785
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/150019
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.