CVE-2019-4238: XSS

Published Apr 25, 2019

Updated

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159464.

Affected Software

5 affected components

IBM InfoSphere Information Server=11.3

IBM InfoSphere Information Server=11.5

IBM InfoSphere Information Server=11.7

IBM Infosphere Information Server On Cloud=11.5

IBM Infosphere Information Server On Cloud=11.7

Event History

Apr 25, 2019

CVE Published

via MITRE·02:36 PM

Data Sourced

via MITRE·02:36 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-4238?

CVE-2019-4238 is a vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

What is the severity of CVE-2019-4238?

The severity of CVE-2019-4238 is medium with a CVSS score of 5.4.

How does CVE-2019-4238 affect IBM InfoSphere Information Server?

CVE-2019-4238 affects IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7.

How can an attacker exploit CVE-2019-4238?

An attacker can exploit CVE-2019-4238 by embedding arbitrary JavaScript code in the Web UI of IBM InfoSphere Information Server, potentially leading to credentials disclosure.

Is there a fix available for CVE-2019-4238?

Yes, IBM has released a fix for CVE-2019-4238. It is recommended to apply the necessary updates as soon as possible.