Cross-Site Scripting Vulnerability in IBM Datacap Fastdoc Capture
CVE-2020-4935
5.4MEDIUM
Summary
IBM Datacap Fastdoc Capture, particularly version 9.1.7, has a vulnerability that allows attackers to exploit cross-site scripting issues via the web interface. This flaw can enable the insertion of arbitrary JavaScript code by users, potentially compromising the security of user credentials during active sessions. The vulnerability poses significant risks as it can lead to unintended alterations in functionality and expose sensitive information within trusted environments.
Affected Version(s)
Datacap Navigator 9.1.7
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved