CVE-2023-47162: IBM Secure Proxy cross-site scripting
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270973.
Other sources
IBM Sterling Secure Proxy is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47162?
CVE-2023-47162 has been classified with a high severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2023-47162?
To fix CVE-2023-47162, upgrade IBM Sterling Secure Proxy to version 6.1.0 or apply the latest patches available.
What are the affected versions of IBM Sterling Secure Proxy for CVE-2023-47162?
The affected versions for CVE-2023-47162 are IBM Sterling Secure Proxy 6.0.3 and 6.1.0.
What risks are associated with CVE-2023-47162?
CVE-2023-47162 allows attackers to inject arbitrary JavaScript code, potentially leading to credential disclosure in trusted sessions.
Is there a workaround for CVE-2023-47162 until a patch is applied?
Currently, there are no known workarounds for CVE-2023-47162, so it is critical to apply the provided patches immediately.