CVE-2012-6360

IBM Intelligent Operations Center 1.5.0 - Cross-Site Scripting via Event Data Fields

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script or HTML via event data fields.

References (3)

Core 3
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PO00211
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80942
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21622222

Scores

EPSS 0.0115
EPSS Percentile 63.5%

Details

CWE
CWE-79
Status published
Products (1)
ibm/intelligent_operations_center 1.5.0
Published Jan 18, 2013
Tracked Since Feb 18, 2026