CVE-2024-45642CWE-942

IBM Security ReaQta information disclosure

Medium · published November 14, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00488 · 41.1th percentile
Weakness
CWE-942 · Permissive Cross-domain Security Policy with Untrusted Domains
Published
2024-11-14T12:04Z
EPSS history
Timeline
  • 14 NOV 12:04Z
    IBM Security ReaQta information disclosure
    cvelistv5