CVE-2023-38017

Опубликовано: 04 фев. 2026

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Ссылки

https://www.ibm.com/support/pages/node/7254419
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:ifix1:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:5.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:5.0.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00285

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209

Связанные уязвимости

GHSA-388r-w9fg-m2x5