Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-36408

Опубликовано: 20 янв. 2026
Источник: nvd
CVSS3: 6.4
EPSS Низкий

Описание

IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ibm:applinx:11.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 8%
0.0003
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.4
github
18 дней назад

IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

EPSS

Процентиль: 8%
0.0003
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-79