Skip to content
OpenAdvisories
Medium · 5.4 CVE-2019-4070 EUVD-2019-13677GHSA-86p3-5wp9-j3q8

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed…

Published Jun 7, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Intelligent Operations Center

Description

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157015.

Affected products

VendorProductAffectedFixed
IBM Intelligent Operations Center 5.1.0, 5.1.0.1, 5.1.0.2, 5.1.0.3, 5.1.0.4, 5.1.0.5, 5.1.0.6, 5.1.0.7, 5.1.0.8, 5.1.0.9, 5.1.0.10, 5.1.0.11, 5.1.0.12, 5.1.0.13, 5.1.0.14, 5.2.0 —

References