CVE-2022-43874

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963.

• CWE-79
• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/239963VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6960189Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/239963VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6960189Vendor Advisory

Published

Mar 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43868IBM Security Verify Access OIDC Provider could disclose dire…5.3
• CVE-2022-43869IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 thro…6.5
• CVE-2022-43870IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNM…6.5
• CVE-2022-43871IBM Financial Transaction Manager for SWIFT Services 3.2.4 i…5.4
• CVE-2022-43872 IBM Financial Transaction Manager 3.2.4 authorization check…5.3
• CVE-2022-43873An authenticated user can exploit a vulnerability in the IBM…8.8
• CVE-2022-43875IBM Financial Transaction Manager for SWIFT Services for Mul…5.5
• CVE-2022-43877IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disc…5.1
• CVE-2022-43880IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow …4.4
• CVE-2022-43883 IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vu…7.5
• CVE-2022-43887 IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vu…5.3
• CVE-2022-43889 IBM Security Verify Privilege On-Premises 11.5 could disclo…5.3