CVE-2021-38982
CVE-2021-38982
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.4EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 nov 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212791.
CVSS:3.0/UI:R/C:L/AV:N/PR:L/S:C/I:L/A:N/AC:L/RL:O/RC:C/E:H
Productos afectados
IBM · Security Key Lifecycle Manager