CVE-2017-1290

Published: Nov 1, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125151.

Affected (10)

Products: Ibm: Openpages Grc Platform

Ibm

1 product

Openpages Grc Platform

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Openpages Grc Platform	Version 7.1.0.0
Ibm Openpages Grc Platform	Version 7.1.0.1
Ibm Openpages Grc Platform	Version 7.1.0.2
Ibm Openpages Grc Platform	Version 7.1.0.3
Ibm Openpages Grc Platform	Version 7.2.0.0
Ibm Openpages Grc Platform	Version 7.2.0.1
Ibm Openpages Grc Platform	Version 7.2.0.2
Ibm Openpages Grc Platform	Version 7.2.0.3
Ibm Openpages Grc Platform	Version 7.2.0.4
Ibm Openpages Grc Platform	Version 7.3.0.0