CVE-2014-0883CWE-79

IBM Power Hardware Management Console cross-site scripting

Medium · published April 20, 2018

CVSS v2.0
4.3
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  91163.

The record
Technical detail
CVSS v2.0
4.3 · MEDIUM
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2018-04-20T21:00Z
EPSS history
Timeline
  • 20 APR 21:00Z
    IBM Power Hardware Management Console cross-site scripting
    cvelistv5