CVE-2020-4663: XSS
IBM Engineering Requirements Quality Assistant is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186234.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-4663.
What is the severity of CVE-2020-4663?
The severity of CVE-2020-4663 is medium (5.4).
What is the affected software?
The affected software is IBM Engineering Requirements Quality Assistant On-Premises.
How does CVE-2020-4663 impact users?
CVE-2020-4663 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
Are there any references available for CVE-2020-4663?
Yes, you can find references for CVE-2020-4663 at the following links: [Link 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/186234), [Link 2](https://www.ibm.com/support/pages/node/6398724).