CVE-2022-40748: XSS

Published Sep 23, 2022

Updated

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236586.

Affected Software

8 affected components

IBM InfoSphere Information Server=11.7

IBM AIX

Linux Linux kernel

Microsoft Windows

All of the following

IBM InfoSphere Information Server=11.7

Any of the following

IBM AIX

Linux Linux kernel

Microsoft Windows

Event History

Sep 23, 2022

CVE Published

via MITRE·05:35 PM

Data Sourced

via MITRE·05:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-40748?

CVE-2022-40748 is a vulnerability in IBM InfoSphere Information Server 11.7 that allows users to inject arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure.

What is the severity of CVE-2022-40748?

The severity of CVE-2022-40748 is medium with a CVSS score of 5.4.

How does CVE-2022-40748 affect IBM InfoSphere Information Server?

CVE-2022-40748 affects IBM InfoSphere Information Server 11.7, allowing users to embed arbitrary JavaScript code in the Web UI.

Is IBM AIX affected by CVE-2022-40748?

No, IBM AIX is not affected by CVE-2022-40748.

How can I fix CVE-2022-40748?

To fix CVE-2022-40748, install the necessary security patches or updates provided by IBM.