Cross-Site Scripting Vulnerability in IBM Cloud Pak for Applications
CVE-2021-20368

5.4MEDIUM

Key Information:

Vendor: IBM
Status: Cloud Pak For Applications
Vendor: CVE Published:; 13 July 2021

Summary

IBM Cloud Pak for Applications 4.3 is susceptible to a cross-site scripting vulnerability that permits individuals to inject and execute arbitrary JavaScript code within the Web User Interface. This intrusion can disrupt expected application behavior and may result in the unauthorized disclosure of user credentials during an active session. For further details, consult IBM's official documentation and vulnerability database entries.

Affected Version(s)

Cloud Pak for Applications 4.3

References

https://www.ibm.com/support/pages/node/6471335

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/195357

vdb-entryx_refsource_XF

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Jul 13, 2021
Vulnerability Reserved
Dec 17, 2020