CVE-2024-28798 — Cross-site Scripting in IBM Infosphere Information Server

CWE-79 — Cross-site Scripting3 documents3 sources

Severity

6.1MEDIUMNVD

CNA7.2

EPSS

0.3%

top 47.04%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Infosphere Information Server

Timeline

PublishedJun 30

Description

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 287172.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5ibm/infosphere_information_server11.7

▶NVDibm/infosphere_information_server11.7

🔴Vulnerability Details

CVEList

IBM InfoSphere Information Server cross-site scripting↗2024-06-30

▶

GHSA

GHSA-v84w-2v56-wm6q: IBM InfoSphere Information Server 11↗2024-06-30

▶