CVEvulnerability

CVE-2012-4819

4.3 MEDIUM Published 2013-01-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

• ibm infosphere business glossary 8.1.1 • ibm infosphere business glossary 8.1.2 • ibm infosphere information server 8.1 • ibm infosphere information server 8.5 • ibm infosphere information server 8.5.0.1 • ibm infosphere information server 8.5.0.2 • ibm infosphere information server 8.7

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References