CVE-2020-4702: XSS
Published Sep 4, 2020
·Updated
IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187187.
Affected Software
1 affected component
IBM InfoSphere Information Server=11.7
Event History
Sep 4, 2020
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-4702.
2
What is the severity of CVE-2020-4702?
The severity of CVE-2020-4702 is medium with a severity value of 5.4.
3
What is the affected software?
IBM InfoSphere Information Server 11.7 is the affected software.
4
What is the potential impact of CVE-2020-4702?
The potential impact of CVE-2020-4702 is the alteration of intended functionality and potential credentials disclosure within a trusted session.
5
How can I fix the vulnerability?
It is recommended to apply the necessary patches or updates provided by IBM to fix this vulnerability.