Cross-Site Scripting Vulnerability in IBM Content Navigator by IBM
CVE-2019-4571
5.4MEDIUM
Summary
IBM Content Navigator 3.0CD is affected by a cross-site scripting vulnerability that allows attackers to inject and execute arbitrary JavaScript code within the web user interface. This security flaw can manipulate the application's intended behavior, potentially leading to the exposure of sensitive credentials during authenticated sessions. Users should be cautious about interacting with untrusted sources while using this application to mitigate the risk.
Affected Version(s)
Content Navigator 3.0CD
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved