Cross-Site Scripting Vulnerability in IBM Security Access Manager Appliance
CVE-2018-1815
6.1MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 13 December 2018
Summary
The IBM Security Access Manager Appliance versions 9.0.1.0 through 9.0.5.0 are affected by a cross-site scripting issue that permits attackers to inject arbitrary JavaScript into the Web UI. This vulnerability could potentially compromise user credentials during logged-in sessions, as it manipulates the application's expected behavior. Proper mitigation strategies are essential to prevent unauthorized access.
Affected Version(s)
Security Access Manager Appliance 9.0.1.0
Security Access Manager Appliance 9.0.2.0
Security Access Manager Appliance 9.0.3.0
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved