Cross-Site Scripting Vulnerability in IBM FileNet Content Manager
CVE-2020-4447

5.4MEDIUM

Key Information:

Vendor: IBM
Status: Filenet Content Manager
Vendor: CVE Published:; 23 July 2020

Summary

IBM FileNet Content Manager versions 5.5.3 and 5.5.4 are susceptible to a cross-site scripting vulnerability. This issue enables attackers to inject arbitrary JavaScript code into the web user interface. As a result, this can alter the intended functionality and may lead to unauthorized disclosure of user credentials within a trusted session. For more details and mitigation strategies, please refer to the official IBM documentation.

Affected Version(s)

FileNet Content Manager 5.5.3

FileNet Content Manager 5.5.4

References

https://www.ibm.com/support/pages/node/6208453

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/181227

vdb-entryx_refsource_XF

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Jul 23, 2020
Vulnerability Reserved
Dec 30, 2019