CVE-2020-4162

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174342.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/174342VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/5690451Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/174342VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/5690451Patch, Vendor Advisory

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-4152IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensit…5.9
• CVE-2020-4153IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to…5.4
• CVE-2020-4157IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-co…7.5
• CVE-2020-4159IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensit…7.5
• CVE-2020-4160IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a re…5.9
• CVE-2020-4161IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…6.5
• CVE-2020-4163IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, und…7.2
• CVE-2020-4164IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1…2.7
• CVE-2020-4165IBM Security Guardium Insights 2.0.1 could allow a remote at…5.4
• CVE-2020-4166IBM Security Guardium Insights 2.0.1 could allow a remote at…5.3
• CVE-2020-4167IBM Security Guardium Insights 2.0.1 could allow an attacker…6.5
• CVE-2020-4169IBM Security Guardium Insights 2.0.1 uses weaker than expect…7.5