Description
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS 6.1EPSS 0.23600000000000002%Risque 0.62
Voir la source- Publication
- 2026-06-22 16:16:41
- Versions concernées
- <=9.1.9
- Type
- Logiciel critique
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L