CVE-2021-29852: XSS
Published Sep 1, 2021
·Updated
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205528.
Affected Software
1 affected component
IBM Planning Analytics=2.0
Remediation
Patch Available
Event History
Sep 1, 2021
CVE Published
via MITRE·04:20 PM
Data Sourced
via MITRE·04:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-29852.
2
What is the severity level of CVE-2021-29852?
The severity level of CVE-2021-29852 is medium.
3
How does the vulnerability CVE-2021-29852 work?
The vulnerability CVE-2021-29852 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
4
What software version is affected by CVE-2021-29852?
IBM Planning Analytics 2.0 is affected by CVE-2021-29852.
5
How can I fix the vulnerability CVE-2021-29852?
To fix the vulnerability CVE-2021-29852, it is recommended to apply the latest security patches or updates provided by IBM.