CVE-2019-4725: XSS
IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131.
Other sources
IBM Security Access Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4725?
CVE-2019-4725 is classified as a high severity vulnerability due to its potential for cross-site scripting leading to credential disclosure.
How do I fix CVE-2019-4725?
To fix CVE-2019-4725, users should update to version 9.0.7.0 or later of IBM Security Access Manager Appliance.
What types of attacks are possible with CVE-2019-4725?
CVE-2019-4725 allows attackers to inject arbitrary JavaScript code, which can manipulate web UI functionality and compromise user credentials.
Which versions of IBM Security Access Manager are affected by CVE-2019-4725?
CVE-2019-4725 affects IBM Security Access Manager versions from 9.0.0.0 to 9.0.7.0.
Is user action required for CVE-2019-4725 exploitation?
Yes, for CVE-2019-4725 exploitation, user interaction is typically required to execute the malicious script embedded in the web UI.