Ibm

Security Risk Manager On Cp4s

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2021-29912

  • EPSS 0.11%
  • Published 19.10.2021 16:15:07
  • Last modified 21.11.2024 06:01:58

IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure w...

4.9

CVE-2021-38911

  • EPSS 0.08%
  • Published 19.10.2021 16:15:07
  • Last modified 21.11.2024 06:18:11

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user. IBM X-Force ID: 209940.