CVE-2012-3341

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input

Medium · published September 1, 2020

CVSS v3.0
6.4
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 78294.

The record
Technical detail
CVSS v3.0
6.4 · MEDIUM
Vector
CVSS:3.0/AC:L/A:N/PR:L/S:C/C:L/AV:N/UI:N/I:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.7th percentile
Published
2020-09-01T16:11Z
EPSS history
Timeline
  • 01 SEP 16:11Z
    IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input
    cvelistv5