Lucene search

IBM1F484E386EE2BD7C02537475272C9F16237843C66ECA672499FC616F2D2DB422

HistoryJan 03, 2023 - 12:54 p.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2022-34336)

2023-01-0312:54:13

www.ibm.com

ibm

websphere application server

cross-site scripting

admin console

cve-2022-34336

tivoli system automation application manager

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.6%

JSON

Summary

IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to cross-site scripting in the Admin Console. Required fixes for affected WebSphere Application Server has been published in the security bulletin links below.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Tivoli System Automation Application Manager	4.1

Remediation/Fixes

Principal Product and Version(s)	Affected Supporting Product and Version	Affected Supporting Product Security Bulletin
IBM Tivoli System Automation Application Manager 4.1	WebSphere Application Server 8.5	Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336)
IBM Tivoli System Automation Application Manager 4.1	WebSphere Application Server 9.0	Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336)

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_system_automation_application_managerMatch4.1