5.4
Moyenne
CVE-2025-36088 IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting
Description
IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Storage TS4500 Library 1.11 | 1.11.0.0-D00 → 1.11.0.2-C00 | Pas de correctif indiqué |
| Storage TS4500 Library | 1.10.00-F00 | Pas de correctif indiqué |
Autres CVE de Storage TS4500 Library
Les 7 CVE de Storage TS4500 Library →
CVE-2025-36061
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could…
6.5
Moyenne
CVE-2025-36069
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an…
5.5
Moyenne
CVE-2025-36252
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate…
6.3
Moyenne
CVE-2026-19178
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized…
6.8
Moyenne