Cross-Site Scripting Vulnerability in IBM OpenPages GRC Platform
CVE-2020-4535

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Openpages Grc Platform
Vendor
CVE Published:
11 May 2021

Summary

IBM OpenPages GRC Platform 8.1 is susceptible to a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject arbitrary JavaScript into the web user interface. This potentially jeopardizes user credentials by manipulating the intended functionality within a trusted session. It is imperative for users and administrators to take proactive measures to secure their applications against this type of threat.

Affected Version(s)

OpenPages GRC Platform 8.1

References

https://www.ibm.com/support/pages/node/6451243
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/182906
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.