IBM Security Bulletin: Cross-site scripting vulnerability in IBM® Intelligent Operations Center (CVE-2019-4070)

Jun 6, 2019 9:01 am EDT

Categorized: Medium Severity

Share this post:

IBM® Intelligent Operations Center does not sanitize all user-controlled inputs and so it is possible to inject malicious code into the application.

CVE(s): CVE-2019-4070

Affected product(s) and affected version(s):
This vulnerability affects the following products and versions:

• IBM® Intelligent Operations Center V5.1.0 – V5.2.0
• IBM® Intelligent Operations Center for Emergency Management V5.1.0 – V5.1.0.6
• IBM® Water Operations for Waternamics V5.1.0 – V5.2.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10879943
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/157015

from IBM Product Security Incident Response Team https://ibm.co/2EUYgDF