Threats tagged 'ghsa-7jqf-q62g-r3mp'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary scripts due to improper neutralization of user-controlled input. This vulnerability is classified as CWE-79 (Cross-Site Scripting). The CVSS v3.1 base score is 5.4, indicating a medium severity level with low complexity attack requiring user interaction and privileges. No patch or remediation information is provided in the available data.