Skip to content
Sign in
6.1 Medium

CVE-2019-4137 IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting

Description

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158333.

Affected products and versions

Product Affected versions Fixed in
Spectrum Control Standard Edition 5.3 5.3.0.1 → 5.3.15.3.2 No fix stated
Spectrum Control Standard Edition 5.2 5.2.13 → 5.2.17.2 No fix stated

Other CVEs of Spectrum Control Standard Edition

The 4 CVEs of Spectrum Control Standard Edition →
CVE-2019-4138 IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive… 5.9 Medium CVE-2019-4071 IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote… 6.8 Medium CVE-2019-4072 IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to… 4.7 Medium
Track this CVE