CVE-2023-35905: IBM FileNet Content Manager cross-site scripting

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/259384
• https://www.ibm.com/support/pages/node/7014389 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7014389

Frequently Asked Questions

• What is CVE-2023-35905?

  CVE-2023-35905 is a vulnerability in IBM FileNet Content Manager that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure.

• How does the CVE-2023-35905 vulnerability affect IBM FileNet Content Manager?

  The CVE-2023-35905 vulnerability affects IBM FileNet Content Manager versions 5.5.8, 5.5.10, and 5.5.11, allowing users to exploit cross-site scripting to alter the intended functionality and potentially disclose credentials.

• What is the severity of the CVE-2023-35905 vulnerability?

  The severity of the CVE-2023-35905 vulnerability is medium, with a severity value of 5.4.

• How can I fix the CVE-2023-35905 vulnerability in IBM FileNet Content Manager?

  To fix the CVE-2023-35905 vulnerability, IBM recommends applying the necessary updates or patches provided by IBM FileNet Content Manager.

• Where can I find more information about the CVE-2023-35905 vulnerability?

  You can find more information about the CVE-2023-35905 vulnerability on the IBM X-Force Exchange website or the IBM support pages.