CVE-2021-39014

MEDIO 5.4CVE-2021-39014 · Published 07/07/2023 · updated 17/06/2026

In breve

CVE-2021-39014 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda cloud object storage system (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.36%, superiore al 30.5% delle vulnerabilità.
Correzione: aggiornare a 3.16.0.47, 3.15.8.106 o successiva.

Package	Affected versions	Patched versions
cloud object storage system ibm	`≥ 3.16.0, < 3.16.0.47< 3.15.8.106`	`3.16.0.473.15.8.106`

Description

IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213650.

References

exchange.xforce.ibmcloud.com/vulnerabilities/213650 · VDB Entry
ibm.com/support/pages/node/6517124 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free