CVE-2022-30615: XSS

Published Nov 3, 2022

Updated

"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592.

Affected Software

8 affected components

IBM InfoSphere Information Server=11.7

IBM AIX

Linux Linux kernel

Microsoft Windows

All of the following

IBM InfoSphere Information Server=11.7

Any of the following

IBM AIX

Linux Linux kernel

Microsoft Windows

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6829311

Event History

Nov 3, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-30615?

The severity of CVE-2022-30615 is medium with a severity score of 5.4.

How does CVE-2022-30615 impact IBM InfoSphere Information Server 11.7?

CVE-2022-30615 allows users to embed arbitrary JavaScript code in the Web UI of IBM InfoSphere Information Server 11.7, potentially leading to credentials disclosure within a trusted session.

Is IBM AIX affected by CVE-2022-30615?

IBM AIX is not affected by CVE-2022-30615.

Is Linux Linux Kernel affected by CVE-2022-30615?

Linux Linux Kernel is not affected by CVE-2022-30615.

Is Microsoft Windows affected by CVE-2022-30615?

Microsoft Windows is not affected by CVE-2022-30615.

How can I fix the cross-site scripting vulnerability in IBM InfoSphere Information Server 11.7?

To fix the cross-site scripting vulnerability in IBM InfoSphere Information Server 11.7, apply the security patch provided by IBM and follow their guidance.

Where can I find more information about CVE-2022-30615?

You can find more information about CVE-2022-30615 on the official IBM support page: https://www.ibm.com/support/pages/node/6829311