| Package | Affected versions | Patched versions |
|---|---|---|
| openpages with watson | ≥ 8.3, < 8.3.0.3≥ 9.0, < 9.0.0.5 | 8.3.0.39.0.0.5 |
IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of user-supplied input of text fields used to construct workflow email notifications. A remote authenticated attacker could exploit this vulnerability using HTML tags in a text field of an object to inject malicious script into an email which would be executed in a victim's mail client within the security context of the OpenPages mail message. An attacker could use this for phishing or identity theft attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free