CVE-2019-4134: XSS

Published Jul 2, 2019

Updated

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158281.

Affected Software

1 affected component

IBM Planning Analytics=2.0

Event History

Jul 2, 2019

CVE Published

via MITRE·03:05 PM

Data Sourced

via MITRE·03:05 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2019-4134.

What is the severity level of CVE-2019-4134?

CVE-2019-4134 has a severity level of medium.

How does CVE-2019-4134 impact IBM Planning Analytics 2.0?

CVE-2019-4134 allows users to embed arbitrary JavaScript code in the Web UI of IBM Planning Analytics 2.0, potentially leading to credentials disclosure within a trusted session.

What is the Common Vulnerabilities and Exposures (CVE) entry for this vulnerability?

The Common Vulnerabilities and Exposures (CVE) entry for this vulnerability is CVE-2019-4134.

How can I fix CVE-2019-4134?

To fix CVE-2019-4134, it is recommended to apply the necessary updates or patches provided by IBM Planning Analytics.