CVE-2021-39068: XSS

Published Apr 11, 2022

Updated

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 215306.

Affected Software

2 affected components

IBM Curam Social Program Management=7.0.11.0

IBM Curam Social Program Management=8.0.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6570589

Event History

Apr 11, 2022

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-39068.

What is the severity level of CVE-2021-39068?

The severity level of CVE-2021-39068 is medium with a severity value of 5.4.

What is the affected software for CVE-2021-39068?

The affected software for CVE-2021-39068 is IBM Curam Social Program Management 7.0.11 and 8.0.1.

What is the impact of CVE-2021-39068?

The impact of CVE-2021-39068 is that it allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

Where can I find more information about CVE-2021-39068?

You can find more information about CVE-2021-39068 on the IBM X-Force ID website and the IBM support page.