CVE-2021-38961

Опубликовано: 27 дек. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/212049
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6536720
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/212049
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6536720
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ibm:power_system_ac922_\(8335-gtg\)_firmware:op910:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_ac922_\(8335-gtg\):-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:ibm:power_system_ac922_\(8335-gtc\)_firmware:op910:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_ac922_\(8335-gtc\):-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:ibm:power_system_ac922_\(8335-gtw\)_firmware:op910:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_ac922_\(8335-gtw\):-:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00131

Низкий

6.1 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-p2p9-3jf4-23jr

github

около 4 лет назад

EPSS

Процентиль: 33%

0.00131

Низкий

6.1 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79