CVE-2020-4740: XSS
IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150.
Other sources
IBM InfoSphere Information Server is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4740?
CVE-2020-4740 is rated as a medium severity vulnerability due to the potential for HTML injection that can be leveraged by attackers.
How do I fix CVE-2020-4740?
To fix CVE-2020-4740, it is recommended to apply the latest patches provided by IBM for InfoSphere Information Server 11.5 and 11.7.
Who is affected by CVE-2020-4740?
CVE-2020-4740 affects users of IBM InfoSphere Information Server versions 11.5 and 11.7.
What type of vulnerability is CVE-2020-4740?
CVE-2020-4740 is an HTML injection vulnerability that allows remote attackers to execute malicious code in victims' web browsers.
Is CVE-2020-4740 an exploitable vulnerability?
Yes, CVE-2020-4740 is exploitable, as it allows attackers to inject malicious HTML that executes in the context of the affected site.