Skip to content
OpenAdvisories
Medium WID-SEC-2025-1979 1 CVE

HCL Commerce (IBM Security Verify Directory): Schwachstelle ermöglicht Cross-Site Scripting

Published Sep 4, 2025 · Updated Sep 4, 2025 · de-DE

Vendor: HCL Software Product: Commerce Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in HCL Commerce ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Commerce ist eine e-Commerce Anwendung von HCL.

Vulnerabilities 1

  • Medium 4.8
    CVE-2022-32754

    IBM Security Verify Directory cross-site scripting

    IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste…

    IBM Security Verify Directory

Revision history

  1. #1

    Initiale Fassung

References