6.1
Moyenne
CVE-2019-4137 IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting
Description
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158333.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spectrum Control Standard Edition 5.3 | 5.3.0.1 → 5.3.15.3.2 | Pas de correctif indiqué |
| Spectrum Control Standard Edition 5.2 | 5.2.13 → 5.2.17.2 | Pas de correctif indiqué |
Autres CVE de Spectrum Control Standard Edition
Les 4 CVE de Spectrum Control Standard Edition →
CVE-2019-4138
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive…
5.9
Moyenne
CVE-2019-4071
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote…
6.8
Moyenne
CVE-2019-4072
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to…
4.7
Moyenne