Not rated
CVE-2016-6046 IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting
Description
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tivoli Storage Manager Extended Edition 7.1 | 7.1 → 7.1.1 | No fix stated |
| Tivoli Storage Manager Extended Edition | 6.4 | No fix stated |
| Tivoli Storage Manager Extended Edition | 6.3 | No fix stated |
| Tivoli Storage Manager Extended Edition | 6.2 | No fix stated |
| Tivoli Storage Manager Extended Edition | 6.1 | No fix stated |
Other CVEs of Tivoli Storage Manager Extended Edition
The 4 CVEs of Tivoli Storage Manager Extended Edition →
CVE-2016-6044
IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the…
Not rated
CVE-2016-6045
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker…
Not rated
CVE-2016-6043
Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to…
Not rated