cbcvebase.
CVE-2018-1947
published 2019-02-21

CVE-2018-1947: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users…

medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153427.

Affected

10 ranges
VendorProductVersion rangeFixed in
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence
ibmsecurity_identity_governance_and_intelligence5.2 – 5.2.4.1