CVE-2026-8059

MEDIUM

IBM Datacap and Navigator - Unauthenticated Cross-Site Scripting

Title source: manual

Description

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7276609

Scores

CVSS v3 6.1

EPSS 0.0017

EPSS Percentile 6.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (12)

ibm/datacap 9.1.7

ibm/datacap 9.1.8

ibm/datacap 9.1.9

IBM/Datacap 9.1.7 - 1.8.4

IBM/Datacap 9.1.8

IBM/Datacap 9.1.9

IBM/Datacap Navigator 9.1.7 - 8.2.1.0

IBM/Datacap Navigator 9.1.8

IBM/Datacap Navigator 9.1.9

ibm/datacap_navigator 9.1.7

... and 2 more

Published Jun 22, 2026

Tracked Since Jun 22, 2026