Описание
IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
6.4 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
Связанные уязвимости
IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Уязвимость консоли управления оборудованием IBM Hardware Management Console, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
6.4 Medium
CVSS3
5.4 Medium
CVSS3