Lucene search

IBMDBD710C16F4AD4DD377BC68B23D00005E0EF8609A312E0310CB2BF0CD4FF091C

HistoryDec 06, 2022 - 3:26 p.m.

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics Installed WebSphere Application Server traditional is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336)

2022-12-0615:26:19

www.ibm.com

ibm tivoli

cam

cross-site scripting

websphere admin console

cve-2022-34336

vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.6%

JSON

Summary

The security issue described in CVE-2022-34336 has been identified in the WebSphere Application Server traditional included as part of IBM Tivoli Composite Application Manager for Application Diagnostics

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
Tivoli Composite Application Manager for Application Diagnostics	7.1.0

Remediation/Fixes

Follow the WebSphere security bulletin, <https://www.ibm.com/support/pages/node/6619699> to update WebSphere Application Servers.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_composite_application_manager_for_wesbsphereMatch7.1.0

VendorProductVersionCPE
ibmtivoli_composite_application_manager_for_wesbsphere7.1.0cpe:2.3:a:ibm:tivoli_composite_application_manager_for_wesbsphere:7.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_composite_application_manager_for_wesbsphere	7.1.0	cpe:2.3:a:ibm:tivoli_composite_application_manager_for_wesbsphere:7.1.0:::::::*