CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-38961

IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.6%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2021-38961

Ibm » Power System Ac922 (8335-Gtc) » Version: N/A

cpe:2.3:h:ibm:power_system_ac922_(8335-gtc):-
Ibm » Power System Ac922 (8335-Gtg) » Version: N/A

cpe:2.3:h:ibm:power_system_ac922_(8335-gtg):-
Ibm » Power System Ac922 (8335-Gtw) » Version: N/A

cpe:2.3:h:ibm:power_system_ac922_(8335-gtw):-
Ibm » Power System Ac922 (8335-Gtc) Firmware » Version: op910

cpe:2.3:o:ibm:power_system_ac922_(8335-gtc)_firmware:op910
Ibm » Power System Ac922 (8335-Gtg) Firmware » Version: op910

cpe:2.3:o:ibm:power_system_ac922_(8335-gtg)_firmware:op910
Ibm » Power System Ac922 (8335-Gtw) Firmware » Version: op910

cpe:2.3:o:ibm:power_system_ac922_(8335-gtw)_firmware:op910

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-38961

Products

Pricing

Contact Us