Description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Metrics
Version
Base score
Base severity
Vector
3.1
6.1
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Version:3.1
Base score:6.1
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Remediation/Fixes IBM strongly recommends addressing the vulnerability now by upgrading to release 9.2.1 Upgraded Version shall be download from : 1. Linux : : https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FInfosphere+Data+Architect&fixids=IIDAV1_9.2_Linux_MP_ML&source=SAR 2. Windows : https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FInfosphere+Data+Architect&fixids=IIDAV1_9.2_WIN_MP_ML&source=SAR