Lucene search

[email protected]CVE-2014-6100

HistoryOct 19, 2014 - 1:55 a.m.

CVE-2014-6100

2014-10-1901:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2014

6100

cross-site scripting

xss

vulnerability

ibm

tivoli directory server

security directory server

remote authenticated users

web script

html

url

5.2 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

36.4%

JSON

Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CPENameOperatorVersion
ibm:security_directory_serveribm security directory servereq6.3.1.5
ibm:tivoli_directory_serveribm tivoli directory servereq6.2.0.3
ibm:tivoli_directory_serveribm tivoli directory servereq6.2.0.7
ibm:tivoli_directory_serveribm tivoli directory servereq6.1.0.13
ibm:tivoli_directory_serveribm tivoli directory servereq6.2.0.6
ibm:tivoli_directory_serveribm tivoli directory servereq6.3.0.8
ibm:tivoli_directory_serveribm tivoli directory servereq6.1.0.8
ibm:tivoli_directory_serveribm tivoli directory servereq6.1.0.36
ibm:tivoli_directory_serveribm tivoli directory servereq6.3.0.32
ibm:tivoli_directory_serveribm tivoli directory servereq6.1.0.20

CPE	Name	Operator	Version
ibm:security_directory_server	ibm security directory server	eq	6.3.1.5
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.2.0.3
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.2.0.7
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.1.0.13
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.2.0.6
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.3.0.8
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.1.0.8
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.1.0.36
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.3.0.32
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.1.0.20

Rows per page:

1-10 of 821

References

secunia.com/advisories/61061

www-01.ibm.com/support/docview.wss?uid=swg21686581

exchange.xforce.ibmcloud.com/vulnerabilities/96005

5.2 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

36.4%

JSON

Related for CVE-2014-6100

prion1 cvelist1 ibm1