CVE-2020-4707: XSS
IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187370.
Other sources
IBM API Connect is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4707?
The severity of CVE-2020-4707 is medium (5.4).
How does CVE-2020-4707 affect IBM API Connect?
CVE-2020-4707 affects IBM API Connect versions 5.0.0.0 through 5.0.8.11.
What is the impact of CVE-2020-4707?
CVE-2020-4707 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
How can I fix CVE-2020-4707?
To fix CVE-2020-4707, upgrade to a version of IBM API Connect that is not affected or apply the necessary security patches.
Where can I find more information about CVE-2020-4707?
You can find more information about CVE-2020-4707 on the IBM X-Force ID page (https://exchange.xforce.ibmcloud.com/vulnerabilities/187370) and the IBM support page (https://www.ibm.com/support/pages/node/6477840).