ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-4140”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-4140
Published
2021-11-12
CVSS:
5.4
ShadowTrackr CVSS:
2.0
Summary:
IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174052.