Cross-Site Scripting Vulnerability in IBM Intelligent Operations Center Products
CVE-2020-4317

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Intelligent Operations Center
Water Operations For Waternamics
Intelligent Operations Center For Emergency Management
Vendor
CVE Published:
28 July 2020

Summary

IBM Intelligent Operations Center products are susceptible to a Cross-Site Scripting vulnerability that permits attackers to inject arbitrary JavaScript into the Web UI. This issue can lead to altered functionality, jeopardizing user sessions and potentially exposing sensitive credentials during trusted interactions.

Affected Version(s)

Intelligent Operations Center 5.1.0

Intelligent Operations Center 5.1.0.2

Intelligent Operations Center 5.1.0.3

References

https://www.ibm.com/support/pages/node/6253295
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/177355
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.