CVE-2018-1895

Published: Feb 15, 2019Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152159.

Affected (5)

Products: Ibm: Infosphere Information Governance Catalog, Infosphere Information Server On Cloud

Ibm

2 products

Infosphere Information Governance Catalog

Infosphere Information Server On Cloud

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Information Governance Catalog	Version 11.3
Ibm Infosphere Information Governance Catalog	Version 11.5
Ibm Infosphere Information Governance Catalog	Version 11.7
Ibm Infosphere Information Server On Cloud	Version 11.5
Ibm Infosphere Information Server On Cloud	Version 11.7