ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-4977”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-4977
Published
2021-06-02
CVSS:
5.4
ShadowTrackr CVSS:
2.0
Summary:
IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192470.