description: IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, and 7.7.0.0 through 7.7.1.3 could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. IBM X-Force ID: 144892.
problem types: Other
affected:
{
product: DataPower Gateway
vendor: IBM
versions:
status: affected, version: 7.6.0.0
status: affected, version: 7.5.2.0
status: affected, version: 7.5.1.0
status: affected, version: 7.5.0.0
status: affected, version: 7.7.0.0
status: affected, version: 7.7.1.3
status: affected, version: 7.5.0.19
status: affected, version: 7.5.1.18
status: affected, version: 7.5.2.18
status: affected, version: 7.6.0.11
status: affected, version: 2018.4.1.0
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.8
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O
version: 3.0
]