CVE-2015-1979 — Cross-site Scripting in IBM Case Manager

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 62.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Case Manager
Timeline
PublishedJul 20
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the (1) addressability or (2) comments component.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/case_manager5.2.1, 5.2.1.1+1

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cmwj-5pmr-846v: Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5↗2022-05-17
▶
CVEList
CVE-2015-1979: Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5↗2015-07-20
▶
CVE-2015-1979 — Cross-site Scripting in IBM | cvebase