Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-388r-w9fg-m2x5

Опубликовано: 04 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

EPSS

Процентиль: 21%
0.00285
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209

Связанные уязвимости

CVSS3: 5.3
nvd
6 месяцев назад

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

EPSS

Процентиль: 21%
0.00285
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209