Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-388r-w9fg-m2x5

Опубликовано: 04 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

EPSS

Процентиль: 6%
0.00025
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209

Связанные уязвимости

CVSS3: 5.3
nvd
3 дня назад

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

EPSS

Процентиль: 6%
0.00025
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209