Medium severity6.1NVD Advisory· Published Apr 4, 2018· Updated Jun 17, 2026

CVE-2017-1772

Description

IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Worklightllm-fuzzy
Range: 6.3, 7.0, 7.1, and 8.0
IBM/Mobilefirst Platform Foundationllm-fuzzy2 versions
6.3, 7.0, 7.1, and 8.0+ 1 more
- (no CPE)range: 6.3, 7.0, 7.1, and 8.0
- (no CPE)range: 6.3

Patches

Vulnerability mechanics

References

www.ibm.com/support/docview.wssnvdPatchVendor Advisory
www.securityfocus.com/bid/103735nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/136786nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000