CVE-2015-0168

IBM Security SiteProtector System 3.0-3.0.0.7, 3.1-3.1.0.4, 3.1.1-3.1.1.2 - Authenticated Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21699470

Scores

EPSS 0.0078
EPSS Percentile 52.2%

Details

CWE
CWE-79
Status published
Products (13)
ibm/security_siteprotector_system 3.0
ibm/security_siteprotector_system 3.0.0.1
ibm/security_siteprotector_system 3.0.0.2
ibm/security_siteprotector_system 3.0.0.3
ibm/security_siteprotector_system 3.0.0.4
ibm/security_siteprotector_system 3.0.0.5
ibm/security_siteprotector_system 3.0.0.6
ibm/security_siteprotector_system 3.1.0.0
ibm/security_siteprotector_system 3.1.0.1
ibm/security_siteprotector_system 3.1.0.2
... and 3 more
Published May 25, 2015
Tracked Since Feb 18, 2026