CVE-2018-1430: XSS
IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139226.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1430?
CVE-2018-1430 is considered a high severity vulnerability due to its potential for cross-site scripting and credential exposure.
How do I fix CVE-2018-1430?
To fix CVE-2018-1430, upgrade IBM API Connect to a version later than 5.0.8.2.
What kind of attack can CVE-2018-1430 facilitate?
CVE-2018-1430 allows attackers to embed arbitrary JavaScript code in the Web UI, which can lead to credential disclosure.
Which versions of IBM API Connect are affected by CVE-2018-1430?
IBM API Connect versions from 5.0.0.0 to 5.0.8.2 are affected by CVE-2018-1430.
Can CVE-2018-1430 be exploited in a trusted session?
Yes, CVE-2018-1430 can be exploited within a trusted session, potentially leading to credentials disclosure.