What is the vulnerability ID of this cross-site scripting vulnerability?

The vulnerability ID of this cross-site scripting vulnerability is CVE-2022-34358.

Which versions of IBM i are affected by this vulnerability?

IBM i 7.5, 7.4, 7.3, and 7.2 are affected by this vulnerability.

What is the potential impact of this vulnerability?

This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

What is the severity level of this vulnerability?

The severity level of this vulnerability is medium, with a CVSS score of 5.4.

How can I fix this cross-site scripting vulnerability in IBM i?

To fix this vulnerability, it is recommended to apply the latest security patches and updates from IBM.

Vulnerability/
CVE-2022-34358

medium

5.4

CWE

12/7/2022

13/7/2022

16/9/2024

CVE-2022-34358: XSS

First published: Tue Jul 12 2022(Updated: )

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230516.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM i	<=7.5
IBM i	<=7.4
IBM i	<=7.3
IBM i	<=7.2
IBM i	=7.2
IBM i	=7.3
IBM i	=7.4
IBM i	=7.5
IBM i

Remedy

https://www.ibm.com/support/pages/node/6603131

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6603131

Frequently Asked Questions

What is the vulnerability ID of this cross-site scripting vulnerability?
The vulnerability ID of this cross-site scripting vulnerability is CVE-2022-34358.
Which versions of IBM i are affected by this vulnerability?
IBM i 7.5, 7.4, 7.3, and 7.2 are affected by this vulnerability.
What is the potential impact of this vulnerability?
This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium, with a CVSS score of 5.4.
How can I fix this cross-site scripting vulnerability in IBM i?
To fix this vulnerability, it is recommended to apply the latest security patches and updates from IBM.

collector/nvd-index
agent/references
agent/type
agent/softwarecombine
agent/first-publish-date
agent/remedy
agent/author
agent/weakness
agent/severity
agent/description
collector/ibm-support
source/IBM
agent/software-canonical-lookup
agent/tags
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/trending
vendor/ibm
canonical/ibm i
version/ibm i/7.2
version/ibm i/7.3
version/ibm i/7.4
version/ibm i/7.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.