Cross-Site Scripting Vulnerability in IBM Content Navigator by IBM
CVE-2019-4571

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Content Navigator
Vendor
CVE Published:
25 September 2019

Summary

IBM Content Navigator 3.0CD is affected by a cross-site scripting vulnerability that allows attackers to inject and execute arbitrary JavaScript code within the web user interface. This security flaw can manipulate the application's intended behavior, potentially leading to the exposure of sensitive credentials during authenticated sessions. Users should be cautious about interacting with untrusted sources while using this application to mitigate the risk.

Affected Version(s)

Content Navigator 3.0CD

References

https://www.ibm.com/support/pages/node/1073576
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/166721
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.