Vulnerability Details CVE-2024-45094
IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.4%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2024-45094
-
cpe:2.3:h:ibm:hardware_management_console_r10.0:-
-
cpe:2.3:h:ibm:hardware_management_console_r9.3:-
-
cpe:2.3:h:ibm:hardware_management_console_r9.4:-
-
cpe:2.3:o:ibm:hardware_management_console_r10.0_firmware:10.0.245.0
-
cpe:2.3:o:ibm:hardware_management_console_r10.0_firmware:10.1.3.0
-
cpe:2.3:o:ibm:hardware_management_console_r9.3_firmware:89.33.45.0
-
cpe:2.3:o:ibm:hardware_management_console_r9.3_firmware:89.33.52.0
-
cpe:2.3:o:ibm:hardware_management_console_r9.4_firmware:89.40.83.0
-
cpe:2.3:o:ibm:hardware_management_console_r9.4_firmware:89.41.25.0
-
cpe:2.3:o:ibm:hardware_management_console_r9.4_firmware:89.42.18.0