CVE-2020-4384

https://notcve.org/view.php?id=CVE-2020-4384

06 May 2020 — IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179265. IBM InfoSphere Information Server versiones 11.3, 11.5 y 11.7, es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en l... • https://exchange.xforce.ibmcloud.com/vulnerabilities/179265 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •