Non notée
CVE-2016-6046 IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting
Description
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Tivoli Storage Manager Extended Edition 7.1 | 7.1 → 7.1.1 | Pas de correctif indiqué |
| Tivoli Storage Manager Extended Edition | 6.4 | Pas de correctif indiqué |
| Tivoli Storage Manager Extended Edition | 6.3 | Pas de correctif indiqué |
| Tivoli Storage Manager Extended Edition | 6.2 | Pas de correctif indiqué |
| Tivoli Storage Manager Extended Edition | 6.1 | Pas de correctif indiqué |
Autres CVE de Tivoli Storage Manager Extended Edition
Les 4 CVE de Tivoli Storage Manager Extended Edition →
CVE-2016-6044
IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the…
Non notée
CVE-2016-6045
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker…
Non notée
CVE-2016-6043
Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to…
Non notée