6.1
Medium
CVE-2019-4681 IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting
Description
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171734.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tivoli Netcool Impact 7.1 | 7.1.0.0 → 7.1.0.17 | No fix stated |
Other CVEs of Tivoli Netcool Impact
The 11 CVEs of Tivoli Netcool Impact →
CVE-2026-4788
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a…
8.4
High
CVE-2021-29794
IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than…
5.9
Medium
CVE-2020-4849
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security…
5.3
Medium
CVE-2020-4239
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when…
5.3
Medium