Threats tagged 'ghsa-5p3w-prcw-23mx'

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 contain a vulnerability that could allow a remote attacker to inject arbitrary HTML due to improper output neutralization. This is a cross-site scripting (XSS) issue classified under CWE-79. The vulnerability has a medium severity with a CVSS score of 5.4. No public exploits or known active exploitation have been reported. No patch or remediation information is currently provided.