CVE-2025-36033
IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim Fix 017, and 7.1.0 through 7.1.0 Interim Fix 004 IBM Global Configuration Management is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Vendor
Product
CWE
Yayın Tarihi
2026-02-03 23:16:05
Güncelleme
2026-02-25 18:55:19
Source Identifier
psirt@us.ibm.com
KEV Date Added
-