6.1
Moyenne
CVE-2025-36239 IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site scripting
Description
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Storage TS4500 Library | 2.11.0.0 | Pas de correctif indiqué |
| Storage TS4500 Library | 1.11.0.0 | Pas de correctif indiqué |
Autres CVE de Storage TS4500 Library
Les 7 CVE de Storage TS4500 Library →
CVE-2025-36061
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could…
6.5
Moyenne
CVE-2025-36069
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an…
5.5
Moyenne
CVE-2025-36252
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate…
6.3
Moyenne
CVE-2026-19178
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized…
6.8
Moyenne