Description
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames.
CVSS breakdown
CVSS 3.0
User Interaction
None
Integrity
None
Scope
Unchanged
Availability
None
Attack Vector
Network
Attack Complexity
Low
Confidentiality
Low
Privileges Required
None
E
Unchanged
RL
O
RC
Changed
Affected products
- ibm / planning_analytics2.0 – 2.0
Updated 15m ago · 8 sources