CVE-2020-4892 in Emptoris Contract Managementinformação

Sumário

de MITRE • 07/01/2021

IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Divulgação

07/01/2021

Moderação

aceite

Entrada

VDB-167417

CPE

pronto

EPSS

0.00554

KEV

não

Atividades

muito baixo

Fontes

Do you know our Splunk app?

Download it now for free!