EUVD-2026-45263
GHSA-2p7x-xfj5-vm79
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Network-delivered XSS requiring victim interaction; impact limited to browser session confidentiality and integrity with no scope change or availability loss.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Lifecycle Timeline
1DescriptionCVE.org
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation.
AnalysisAI
Cross-site scripting in IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 enables remote attackers to inject and execute arbitrary script code within a victim's browser session through unsanitized input that is rendered during web page generation. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) confirms remote, unauthenticated exploitability contingent on victim interaction, consistent with reflected or stored XSS. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that a victim user interact with attacker-controlled content rendered by the IBM Engineering AI Hub web interface - specifically, that the victim's browser loads and renders a page containing the injected script payload (UI:R per CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 5.4 (Medium) reflects a network-accessible, low-complexity flaw that requires no attacker authentication (PR:N) but depends on victim interaction (UI:R), with limited confidentiality and integrity impact (C:L/I:L) and no availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker identifies a publicly or internally accessible IBM Engineering AI Hub instance running a vulnerable version and crafts a URL or form submission embedding a JavaScript payload in an unsanitized input field. The attacker distributes the crafted link via phishing email to an engineer who uses the platform, and upon clicking, the victim's browser renders the malicious script within the Engineering AI Hub web context. … |
| Remediation | Apply the vendor-released patch documented in IBM Security Bulletin https://www.ibm.com/support/pages/node/7279964 - the precise fixed version must be confirmed directly from that advisory, as it is not stated in the available CVE data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Engineering Ai Hub
View allStored/reflected cross-site scripting in IBM Engineering AI Hub 1.0.0 through 1.2.0 lets a remote unauthenticated attack
Sensitive information disclosure in IBM Engineering AI Hub 1.0.0 through 1.2.0 allows remote attackers to harvest sessio
IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 expose an open redirect flaw (CWE-601) that enables remote attac
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today