Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-29676

Опубликовано: 25 июн. 2021
Источник: nvd
CVSS3: 4.6
CVSS3: 5.4
CVSS2: 5.8
EPSS Низкий

Описание

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ibm:security_verify:*:*:*:*:*:*:*:*
Версия до 10.9.66 (исключая)

EPSS

Процентиль: 32%
0.00123
Низкий

4.6 Medium

CVSS3

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

github
больше 3 лет назад

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking

EPSS

Процентиль: 32%
0.00123
Низкий

4.6 Medium

CVSS3

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-74