Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM6064C0CB60412348563A4D93B74F17C3B26A10454580672AEA29BB8E1E2999A7
HistoryJul 01, 2024 - 3:31 p.m.

Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to cross-site scripting due to IBM WebSphere Application Server Liberty (CVE-2024-27270)

2024-07-0115:31:30
www.ibm.com
1
ibm tivoli netcool impact
cross-site scripting
ibm websphere application server liberty
cve-2024-27270
vulnerability
upgrade

4.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Summary

IBM WebSphere Application Server Liberty is shipped with IBM Tivoli Netcool Impact as part of its server infrastructure. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin.

Vulnerability Details

CVEID:CVE-2024-27270
**DESCRIPTION:**IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.
CVSS Base score: 4.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/284576 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Tivoli Netcool Impact 7.1.0.0 - 7.1.0.33

Remediation/Fixes

** IBM strongly recommends addressing the vulnerability now.**

Product VRMF APAR Remediation
IBM Tivoli Netcool Impact 7.1.0.34 DT390137 Upgrade to IBM Tivoli Netcool Impact 7.1.0 FP34 or later

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmtivoli_netcool\/impactMatch7.1.0
CPENameOperatorVersion
tivoli netcool/impacteq7.1.0

Related

ibm 18
cvelist 1
nessus 1
nvd 1
cnvd 1
vulnrichment 1
cve 1
ibm
ibm
Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM WebSphere Application Server Liberty is vulnerable to cross-site scripting (CVE-2024-27270)
2024-04-22 06:07:56
Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to cross-site scripting due to WebSphere Application Server Liberty
2024-06-25 16:18:56
Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to cross-site scripting (CVE-2024-27270).
2024-06-12 13:34:57
cvelist
cvelist
CVE-2024-27270 IBM WebSphere Application Server Liberty cross-site scripting
2024-03-27 12:42:52
nessus
nessus
IBM WebSphere Application Server Liberty 23.0.0.3 < 24.0.0.4 XSS (7145231)
2024-03-27 00:00:00
nvd
nvd
CVE-2024-27270
2024-03-27 13:15:47
cnvd
cnvd
IBM WebSphere Application Server Liberty Cross-Site Scripting Vulnerability (CNVD-2024-15727)
2024-03-29 00:00:00
vulnrichment
vulnrichment
CVE-2024-27270 IBM WebSphere Application Server Liberty cross-site scripting
2024-03-27 12:42:52
cve
cve
CVE-2024-27270
2024-03-27 13:15:47

4.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON
Related for 6064C0CB60412348563A4D93B74F17C3B26A10454580672AEA29BB8E1E2999A7
ibm18cvelist1nessus1nvd1cnvd1vulnrichment1cve1