Unscored severity · published Jul 20, 2015
CVE-2015-1979
Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the (1) addressability or (2) comments component.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Case Manager · Ibm
5.2.1; 5.2.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1979
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1979
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21959695
www.securityfocus.com
http://www.securityfocus.com/bid/75538
More from Case Manager
7.8
CVE-2018-1884
IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using…
5.4
CVE-2020-4768
IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting
5.4
CVE-2019-4426
The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting