Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Metrica Service Assurance Framework
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-5043 1 Ibm 1 Metrica Service Assurance Framework 2023-12-10 3.5 LOW N/A
Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via (1) the elementid parameter in a generatedreportresults action to the ReportTree program, (2) the jnlpname parameter to the Launch program, or (3) the :tasklabel parameter to the ReportRequest program, related to the name of a report.