CVE-2023-47162 PUBLISHED CVSS 6.099999904632568 MEDIUM

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270973.

EPSS 0.15% · 35.7th percentile

Risk Scores

CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.15%
35.7th percentile

Affected Products

VendorProductVersions
ibmsterling_secure_proxy6.0.3, 6.1.0
IBMSecure Proxy6.0.3, 6.1.0

Timeline

References

Open in Interactive Console →