CVE-2012-0203

Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: Jan 31, 2013
Updated: Apr 13, 2023
CVE: CVE-2012-0203
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
ibm / infosphere_information_server	8.5	8.5.x
ibm / infosphere_information_server	8.1	8.1.x
ibm / infosphere_metadata_workbench	8.7	8.7.x
ibm / infosphere_metadata_workbench	8.5	8.5.x
ibm / infosphere_metadata_workbench	8.1	8.1.x
ibm / infosphere_metadata_workbench	8.1.1	8.1.1.x
ibm / infosphere_metadata_workbench	8.1.2	8.1.2.x
ibm / infosphere_information_server	8.5.0.1	8.5.0.1.x
ibm / infosphere_information_server	8.5.0.2	8.5.0.2.x

http://www-01.ibm.com/support/docview.wss?uid=swg21623501
https://exchange.xforce.ibmcloud.com/vulnerabilities/73254

Vulnerability Database

289,697

CVE-2012-0203