Skip to content
OpenAdvisories
Medium · 6.1 CVE-2019-4632 EUVD-2019-14239GHSA-3q6g-2ch9-q6x7

IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i…

Published Jan 28, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Security Secret Server

Description

IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170004.

Affected products

VendorProductAffectedFixed
IBM Security Secret Server 10.7 —

References