CVE-2021-29676

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection

Medium · published June 25, 2021

CVSS v3.0
4.6
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking

The record
Technical detail
CVSS v3.0
4.6 · MEDIUM
Vector
CVSS:3.0/I:L/AV:N/A:N/PR:L/AC:L/C:L/S:U/UI:R/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00832 · 57.2th percentile
Published
2021-06-25T17:40Z
EPSS history
Timeline
  • 25 JUN 17:40Z
    IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection
    cvelistv5