CVE-2017-1553

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131397.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22009192Patch, Vendor Advisory
• http://www.securityfocus.com/bid/101588Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/131397VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22009192Patch, Vendor Advisory
• http://www.securityfocus.com/bid/101588Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/131397VDB Entry, Vendor Advisory

Published

Nov 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15524The Application Firewall Pack (AFP, aka Web Application Fire…
• CVE-2017-15525Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be…
• CVE-2017-15526Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be…
• CVE-2017-15527Prior to ITMS 8.1 RU4, the Symantec Management Console can b…
• CVE-2017-15528Prior to v 7.6, the Install Norton Security (INS) product ca…3.7
• CVE-2017-15529Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-15530Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-15531Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.…
• CVE-2017-15532Prior to 10.6.4, Symantec Messaging Gateway may be susceptib…
• CVE-2017-15533Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4…
• CVE-2017-15534The Norton App Lock prior to version 1.3.0.13 can be suscept…
• CVE-2017-15535MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a di…