CVE-2022-43874

Published: Mar 15, 2023Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963.

Affected (9)

Products: Ibm: App Connect Enterprise Certified Container

Ibm

1 product

App Connect Enterprise Certified Container

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm App Connect Enterprise Certified Container	Version 4.1
Ibm App Connect Enterprise Certified Container	Version 4.2
Ibm App Connect Enterprise Certified Container	Version 5.0
Ibm App Connect Enterprise Certified Container	Version 5.1
Ibm App Connect Enterprise Certified Container	Version 5.2
Ibm App Connect Enterprise Certified Container	Version 6.0
Ibm App Connect Enterprise Certified Container	Version 6.1
Ibm App Connect Enterprise Certified Container	Version 6.2
Ibm App Connect Enterprise Certified Container	Version 7.0