Skip to content
OpenAdvisories
Medium · 5.4 CVE-2018-1429 EUVD-2018-12008GHSA-4p7h-pwv3-jh28

IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

Published Mar 23, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: MQ Appliance

Description

IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139077.

Affected products

VendorProductAffectedFixed
IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, 9.0.4 —

References