CVE-2022-34358

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230516.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/230516VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6603131Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/230516VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6603131Patch, Vendor Advisory

Published

Jul 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34351IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exp…7.5
• CVE-2022-34352 IBM QRadar SIEM 7.5.0 is vulnerable to information exposure…6.5
• CVE-2022-34354 IBM Sterling Partner Engagement Manager 2.0 allows encrypte…3.3
• CVE-2022-34355IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.…5.5
• CVE-2022-34356IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privil…7.8
• CVE-2022-34357IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.…6.5
• CVE-2022-3436A vulnerability classified as critical was found in SourceCo…7.5
• CVE-2022-34361 IBM Sterling Secure Proxy 6.0.3 uses weaker than expected c…7.5
• CVE-2022-34362 IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP heade…4.6
• CVE-2022-34363Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, …7.5
• CVE-2022-34364 Dell BSAFE SSL-J, versions before 6.5 and version 7.0 con…4.4
• CVE-2022-34365WMS 3.7 contains a Path Traversal Vulnerability in Device AP…6.5