IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199281.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ibm
Published: 2021-05-10T16:20:17.399421Z
Updated: 2024-09-17T00:16:35.976Z
Reserved: 2020-12-17T00:00:00
Link: CVE-2021-20577
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-05-10T17:15:07.763
Modified: 2024-11-21T05:46:48.310
Link: CVE-2021-20577
Redhat
No data.