← Database

CVE-2024-45094

MEDIUM CVSS: 5.5 Published: 2025-05-27 Modified: 2026-06-17

Description

IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Platforms

Ibm Hardware Management Console R9.4 FirmwareIbm Hardware Management Console R9.3Ibm Hardware Management Console R9.3 FirmwareIbm Hardware Management Console R10.0Ibm Hardware Management Console R9.4Ibm Hardware Management Console R10.0 Firmware

Weakness Type

CWE-79

References