Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-1376 EUVD-2018-11955GHSA-wpww-xrp2-j2qc

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

Published May 29, 2018 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Security Guardium Big Data Intelligence

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137777.

Affected products

VendorProductAffectedFixed
IBM Security Guardium Big Data Intelligence 3.1 —

References