CVE-2018-1441: XSS

Published Mar 14, 2018

Updated

IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139597.

Affected Software

2 affected components

IBM Monitoring=8.1.3

IBM Monitoring=8.1.4

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22013557

Event History

Mar 14, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1441?

CVE-2018-1441 is classified as a high severity vulnerability due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2018-1441?

To fix CVE-2018-1441, upgrade IBM Application Performance Management to version 8.1.5 or later.

What are the consequences of exploiting CVE-2018-1441?

Exploiting CVE-2018-1441 can lead to unauthorized access and manipulation of the application, potentially compromising user credentials.

Which versions of IBM Monitoring are affected by CVE-2018-1441?

CVE-2018-1441 affects IBM Monitoring versions 8.1.3 and 8.1.4.

Is CVE-2018-1441 a client-side or server-side vulnerability?

CVE-2018-1441 is primarily a client-side vulnerability, allowing for the execution of arbitrary JavaScript in the web interface.