Unscored CVE-2018-1772 EUVD-2018-12351GHSA-h329-xpjq-88wp

IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code …

Published Jan 15, 2019 · Updated Aug 5, 2024 · Assigned by ibm

Description

IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148689.

References

https://www.ibm.com/support/docview.wss?uid=ibm10791853
106630 vdb-entry
ibm-spss-cve20181772-xss(148689) vdb-entry