CVE-2017-1133 - Vulnerability Details

Vendors	Products
Ibm	Qradar Incident Forensics Qradar Security Information And Event Manager

Link	Providers
http://www.ibm.com/support/docview.wss?uid=swg21999534
http://www.securityfocus.com/bid/97239

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "QRadar SIEM", "vendor": "IBM Corporation", "versions": [{"status": "affected", "version": "7.1 MR1"}, {"status": "affected", "version": "7.1"}, {"status": "affected", "version": "7.0"}, {"status": "affected", "version": "7.2"}, {"status": "affected", "version": "7.1 MR2"}, {"status": "affected", "version": "7"}, {"status": "affected", "version": "7.2.3"}]}], "datePublic": "2017-02-28T00:00:00", "descriptions": [{"lang": "en", "value": "IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534."}], "problemTypes": [{"descriptions": [{"description": "Cross-Site Scripting", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-03-31T09:57:02", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21999534"}, {"name": "97239", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/97239"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2017-1133", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "QRadar SIEM", "version": {"version_data": [{"version_value": "7.1 MR1"}, {"version_value": "7.1"}, {"version_value": "7.0"}, {"version_value": "7.2"}, {"version_value": "7.1 MR2"}, {"version_value": "7"}, {"version_value": "7.1 MR2"}, {"version_value": "7.2.3"}]}}]}, "vendor_name": "IBM Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Cross-Site Scripting"}]}]}, "references": {"reference_data": [{"name": "http://www.ibm.com/support/docview.wss?uid=swg21999534", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg21999534"}, {"name": "97239", "refsource": "BID", "url": "http://www.securityfocus.com/bid/97239"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:25:17.274Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21999534"}, {"name": "97239", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/97239"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1133", "datePublished": "2017-03-07T17:00:00", "dateReserved": "2016-11-30T00:00:00", "dateUpdated": "2024-08-05T13:25:17.274Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : QRadar SIEM (string)

vendor : IBM Corporation (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.1 MR1 (string)

}

1 : { »

status : affected (string)

version : 7.1 (string)

}

2 : { »

status : affected (string)

version : 7.0 (string)

}

3 : { »

status : affected (string)

version : 7.2 (string)

}

4 : { »

status : affected (string)

version : 7.1 MR2 (string)

}

5 : { »

status : affected (string)

version : 7 (string)

}

6 : { »

status : affected (string)

version : 7.2.3 (string)

}

]

}

]

datePublic : 2017-02-28T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Cross-Site Scripting (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-03-31T09:57:02 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg21999534 (string)

}

1 : { »

name : 97239 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/97239 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

ID : CVE-2017-1133 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : QRadar SIEM (string)

version : { »

version_data : [ »

0 : { »

version_value : 7.1 MR1 (string)

}

1 : { »

version_value : 7.1 (string)

}

2 : { »

version_value : 7.0 (string)

}

3 : { »

version_value : 7.2 (string)

}

4 : { »

version_value : 7.1 MR2 (string)

}

5 : { »

version_value : 7 (string)

}

6 : { »

version_value : 7.1 MR2 (string)

}

7 : { »

version_value : 7.2.3 (string)

}

]

}

]

}

vendor_name : IBM Corporation (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Cross-Site Scripting (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : http://www.ibm.com/support/docview.wss?uid=swg21999534 (string)

refsource : CONFIRM (string)

url : http://www.ibm.com/support/docview.wss?uid=swg21999534 (string)

}

1 : { »

name : 97239 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/97239 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T13:25:17.274Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg21999534 (string)

}

1 : { »

name : 97239 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/97239 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2017-1133 (string)

datePublished : 2017-03-07T17:00:00 (string)

dateReserved : 2016-11-30T00:00:00 (string)

dateUpdated : 2024-08-05T13:25:17.274Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "A08699DC-4308-473C-9C49-8140A6B76708", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "D8638E25-AFF7-4A5F-B3FE-5EEE3FA523A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "E0BF0C5D-1E66-4457-9239-345D507AC59E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "FE1F734E-4DB1-4349-B7C1-4EB1E10045CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "4BB5CEFD-D54E-4E1E-9905-7022F1B7A53F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "03DB890A-9E3E-49BF-ADE8-DC118E504DEA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "7FFAAB1A-76E3-4B95-BD08-225A40B36D96", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "5D5A4C20-55BB-40C3-BB85-61C74F246A60", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "DBC674A8-D18C-403A-A01B-9EA1B7221056", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "7C137959-2279-4459-8A10-43AFE09E2641", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "39D53329-E729-43C1-8C67-EFA4C3F7BFBC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "9FC4EDCA-DF37-4366-B944-F342FA55EEFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "76CA942D-70AD-4E0D-A28E-443FB7140A54", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "CE8844C7-52E1-45A0-AC51-B6F6F14DE38A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "5382FD46-85CB-460F-8AA5-163EA26F34B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534."}, {"lang": "es", "value": "IBM QRadar 7.2 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incrustar c\u00f3digo JavaScript arbitrario en la interfaz web alterando as\u00ed la funcionalidad intencionada conduciendo potencialmente a divulgaci\u00f3n de credenciales en una sesi\u00f3n de confianza. Referencia de IBM #: 1999534."}], "id": "CVE-2017-1133", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-03-07T17:59:00.603", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21999534"}, {"source": "psirt@us.ibm.com", "url": "http://www.securityfocus.com/bid/97239"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21999534"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/97239"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A08699DC-4308-473C-9C49-8140A6B76708 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : D8638E25-AFF7-4A5F-B3FE-5EEE3FA523A5 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.2:*:*:*:*:*:*:* (string)

matchCriteriaId : E0BF0C5D-1E66-4457-9239-345D507AC59E (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : FE1F734E-4DB1-4349-B7C1-4EB1E10045CF (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 4BB5CEFD-D54E-4E1E-9905-7022F1B7A53F (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 03DB890A-9E3E-49BF-ADE8-DC118E504DEA (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FFAAB1A-76E3-4B95-BD08-225A40B36D96 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D5A4C20-55BB-40C3-BB85-61C74F246A60 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:*:*:*:*:*:*:* (string)

matchCriteriaId : DBC674A8-D18C-403A-A01B-9EA1B7221056 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7C137959-2279-4459-8A10-43AFE09E2641 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 39D53329-E729-43C1-8C67-EFA4C3F7BFBC (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 9FC4EDCA-DF37-4366-B944-F342FA55EEFD (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 76CA942D-70AD-4E0D-A28E-443FB7140A54 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:* (string)

matchCriteriaId : E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:* (string)

matchCriteriaId : CE8844C7-52E1-45A0-AC51-B6F6F14DE38A (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 5382FD46-85CB-460F-8AA5-163EA26F34B6 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534. (string)

}

1 : { »

lang : es (string)

value : IBM QRadar 7.2 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la interfaz web alterando así la funcionalidad intencionada conduciendo potencialmente a divulgación de credenciales en una sesión de confianza. Referencia de IBM #: 1999534. (string)

}

]

id : CVE-2017-1133 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : LOW (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 3.5 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:S/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 6.8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 2.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-03-07T17:59:00.603 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg21999534 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

url : http://www.securityfocus.com/bid/97239 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg21999534 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/bid/97239 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object