CVE-2022-22456

CVSS V2 None CVSS V3 None
Description
IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225004.
Overview
  • CVE ID
  • CVE-2022-22456
  • Assigner
  • psirt@us.ibm.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-22T22:15:12
  • Last Modified Date
  • 2022-12-28T14:35:17
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:ibm:security_verify_governance:10.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* 0 OR
History
Created Old Value New Value Data Type Notes
2022-12-22 23:15:24 Added to TrackCVE
2022-12-22 23:15:24 Weakness Enumeration new
2022-12-23 04:15:28 2022-12-23T03:31:02 CVE Modified Date updated
2022-12-23 04:15:28 Received Awaiting Analysis Vulnerability Status updated
2022-12-23 19:15:26 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-28 15:14:49 2022-12-28T14:35:17 CVE Modified Date updated
2022-12-28 15:14:49 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-28 15:14:53 CPE Information updated