Cross-Site Scripting Vulnerability in IBM Cyber Fraud Application
CVE-2026-9870

6.1MEDIUM

Key Information:

Vendor

IBM
Status
Cyber Fraud
Vendor
CVE Published:
13 November 2026

What is CVE-2026-9870?

IBM Cyber Fraud versions 1.0.0 through 1.1.0 are susceptible to cross-site scripting (XSS) vulnerabilities. This issue enables unauthenticated attackers to inject malicious JavaScript code into the Web User Interface, which can manipulate the application's functionality. Such an attack may lead to the unauthorized disclosure of sensitive credentials within an authenticated session, compromising user security and trust.

Affected Version(s)

Cyber Fraud 1.0.0 <= 1.1.0

References

https://www.ibm.com/support/pages/node/7295966
vendor-advisorypatch

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.