Skip to content
Sign in
Not rated

CVE-2016-8943 IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting

Description

IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Spectrum Control Standard Select Edition 5.2 5.2 → 5.2.11 No fix stated
Spectrum Control Standard Select Edition 5.1 5.1 → 5.1.1 No fix stated

Other CVEs of Spectrum Control Standard Select Edition

The 3 CVEs of Spectrum Control Standard Select Edition →
CVE-2016-8942 IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a… Not rated CVE-2016-8941 IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to… Not rated
Track this CVE