CVE-2017-1209 in Daeja ViewONEinfo

Summary

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

11/30/2016

Disclosure

10/24/2017

CPE

ready

CVSS

4.4

EPSS

0.00184

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!