CVE-2017-1369

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126862.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22008785Vendor Advisory
• http://www.securityfocus.com/bid/101062Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126862VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg22008785Vendor Advisory
• http://www.securityfocus.com/bid/101062Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126862VDB Entry

Published

Oct 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13684Unisys Libra 64xx and 84xx and FS601 class systems with MCP-…
• CVE-2017-13685The dump_callback function in SQLite 3.20.0 allows remote at…
• CVE-2017-13686net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-r…
• CVE-2017-13687The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer o…9.8
• CVE-2017-13688The OLSR parser in tcpdump before 4.9.2 has a buffer over-re…9.8
• CVE-2017-13689The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-r…9.8
• CVE-2017-13690The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-r…
• CVE-2017-13692In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allow…
• CVE-2017-13693The acpi_ds_create_operands() function in drivers/acpi/acpic…
• CVE-2017-13694The acpi_ps_complete_final_op() function in drivers/acpi/acp…
• CVE-2017-13695The acpi_ns_evaluate() function in drivers/acpi/acpica/nseva…
• CVE-2017-13696A buffer overflow vulnerability lies in the web server compo…