CVE-2021-29677

MEDIO 5.4CVE-2021-29677 · Published 25/06/2021 · updated 17/06/2026

In breve

CVE-2021-29677 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda security verify (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 42.8% delle vulnerabilità.
Correzione: aggiornare a 10.9.66 o successiva.

Package	Affected versions	Patched versions
security verify ibm	`< 10.9.66`	`10.9.66`

Description

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

References

exchange.xforce.ibmcloud.com/vulnerabilities/199578 · VDB Entry
ibm.com/support/pages/node/6467045 · Patch

Altre vulnerabilità di security verify

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free