Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-4318 EUVD-2020-25565GHSA-4h35-wggv-9625

IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics a…

Published Jul 28, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177356.

Affected products

VendorProductAffectedFixed
IBM Intelligent Operations Center for Emergency Management 5.1.0, 5.1.0.2, 5.1.0.3, 5.1.0.4, 5.1.0.6 —
IBM Water Operations for Waternamics 5.1.0, 5.1.0.2, 5.1.0.3, 5.1.0.4, 5.1.0.6, 5.2, 5.2.1 —
IBM Intelligent Operations Center 5.1.0, 5.1.0.2, 5.1.0.3, 5.1.0.4, 5.1.0.6, 5.2, 5.2.1 —

References