Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cw94-3r54-76v4

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677.

IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677.

EPSS

Процентиль: 26%
0.00092
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 5.4
nvd
около 7 лет назад

IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677.

EPSS

Процентиль: 26%
0.00092
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-74