CVE-2020-4838: XSS
IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190036.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for IBM API Connect?
The vulnerability ID for IBM API Connect is CVE-2020-4838.
What is the severity of CVE-2020-4838?
The severity of CVE-2020-4838 is medium (5.4).
What is the description of CVE-2020-4838?
CVE-2020-4838 is a stored cross-site scripting vulnerability in IBM API Connect 5.0.0.0 through 5.0.8.10, allowing users to embed arbitrary JavaScript code in the Web UI potentially leading to credentials disclosure within a trusted session.
How does CVE-2020-4838 affect IBM API Connect?
CVE-2020-4838 affects IBM API Connect 5.0.0.0 through 5.0.8.10, allowing stored cross-site scripting attacks.
How can I fix CVE-2020-4838 in IBM API Connect?
To fix CVE-2020-4838 in IBM API Connect, update to a version higher than 5.0.8.10.