CVE record · 1 source
CVE-2026-3295
CVSS 7.4IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting.
- Vendor
- Oracle
- Product
- java
- CVSS
- 7.4
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting.
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit…