CVE-2025-36033 in Engineering Lifecycle Management信息

摘要

由 VulDB • 2026-07-23

IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 至 7.0.3 Interim Fix 017，以及 7.1.0 至 7.1.0 Interim Fix 004 IBM Global Configuration Management 存在跨站脚本漏洞。此漏洞允许经过身份验证的用户在 Web UI 中嵌入任意 JavaScript 代码，从而改变预期功能，可能导致受信任会话中的凭据泄露。

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Ibm

预定

2025-04-15

披露

2026-02-04

管理

已接受

条目

VDB-344175

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

5.4 (NVD)

EPSS

0.00144

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-36033
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-36033
CVE Details	https://www.cvedetails.com/cve/CVE-2025-36033/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!