CVE-2024-41774: IBM Common Licensing cross-site scripting
IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 350348.
Other sources
IBM Common Licensing is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41774?
CVE-2024-41774 has a high severity rating due to its potential for stored cross-site scripting and credential disclosure.
How do I fix CVE-2024-41774?
To remediate CVE-2024-41774, upgrade IBM Common Licensing to a version above 9.0.
Who is affected by CVE-2024-41774?
CVE-2024-41774 affects users of IBM Common Licensing versions up to and including 9.0.
What type of vulnerability is CVE-2024-41774?
CVE-2024-41774 is classified as a stored cross-site scripting vulnerability.
What are the risks associated with CVE-2024-41774?
The risks include arbitrary JavaScript code execution and potential credential disclosure in trusted sessions.