CVE-2018-1895: XSS
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152159.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1895 vulnerability?
CVE-2018-1895 is a cross-site scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7.
How does the vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 work?
The vulnerability allows users to inject arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
What is the severity of CVE-2018-1895 vulnerability?
The severity of CVE-2018-1895 vulnerability is medium with a score of 5.4.
Which IBM products are affected by CVE-2018-1895 vulnerability?
IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7, as well as IBM InfoSphere Information Server On Cloud 11.5 and 11.7, are affected by this vulnerability.
How can I fix the CVE-2018-1895 vulnerability?
Update IBM InfoSphere Information Server to the latest version to mitigate the vulnerability. Refer to the provided IBM support documentation for more information.