5.4
Moyenne
CVE-2020-4235 IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting
Description
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175408.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Tivoli Netcool Impact 7.1 | 7.1.0 → 7.1.0.17 | Pas de correctif indiqué |
Autres CVE de Tivoli Netcool Impact
Les 11 CVE de Tivoli Netcool Impact →
CVE-2026-4788
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a…
8.4
Élevée
CVE-2021-29794
IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than…
5.9
Moyenne
CVE-2020-4849
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security…
5.3
Moyenne
CVE-2020-4239
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when…
5.3
Moyenne