CVE-2023-38007 Information

Description

IBM Cloud Pak System 2.3.5.0 2.3.3.7 2.3.3.7 iFix1 on Power and 2.3.3.6 2.3.3.6 iFix1 2.3.3.6 iFix2 2.3.4.0 2.3.4.1 on Intel operating systems is vulnerable to HTML injection. A remote attacker could inject malicious HTML code which when viewed would be executed in the victim’s Web browser within the security context of the hosting site.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Reference

https://www.ibm.com/support/pages/node/7237162

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

REQUIRED

Confidentiality Impact

CHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

NONE

Base Severity

5.4

Related CNNVD

CNNVD-202506-3577 (Published: 2025-06-27)