CVE-2018-1667

Published: Dec 13, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144893.

Affected (5)

Products: Ibm: Datapower Gateway

Ibm

1 product

Datapower Gateway

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Datapower Gateway	From 7.5.0.0 to 7.5.0.18
Ibm Datapower Gateway	From 7.5.1.0 to 7.5.1.17
Ibm Datapower Gateway	From 7.5.2.0 to 7.5.2.17
Ibm Datapower Gateway	From 7.6.0.0 to 7.6.0.10
Ibm Datapower Gateway	From 7.7.0.0 to 7.7.1.3