PT-2018-4349 · Ibm · Ibm Appscan Enterprise Edition

Publicado 2018-04-16 · Atualizado 2018-05-22 · CVE-2015-1952

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM AppScan Enterprise Edition versions 9.0.x before 9.0.2 iFix 001

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For IBM AppScan Enterprise Edition versions 9.0.x before 9.0.2 iFix 001, apply the 9.0.2 iFix 001 patch to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-1952

Produtos afetados

Ibm Appscan Enterprise Edition

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-1952 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/103416 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21883124 · Aviso do Fabricante