CVE-2020-4775

A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10

Medium · published October 12, 2020

CVSS v3.0
5.4
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/UI:R/S:C/C:L/I:L/AC:L/AV:N/A:N/PR:L/E:H/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00561 · 45.9th percentile
Published
2020-10-12T13:05Z
EPSS history
Timeline
  • 12 OCT 13:05Z
    A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
    cvelistv5