Code injection

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

CVE-2013-5423

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

CVE-2013-5423

Summary: CVE-2013-5423 affects IBM Flex System Manager (FSM) and IBM Systems Director in related advisories. The vulnerability allows an unauthenticated or unauthorized attacker to enumerate the list of user accounts in FSM/ISD, which could facilitate brute-force or unauthorized access attempts. ...

PT-2014-2923

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager FSM versions 1.1 through 1.3 before 1.3.2.0 Description The issue allows remote attackers to enumerate user accounts via unspecified vectors. Recommendations For versions 1.1 through 1.3 before 1.3.2.0, update to versio...

CVE-2013-5423: Exposure of Sensitive Information to an Unauthorized Actor

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

IBM Flex System Manger跨站脚本漏洞

CVE ID:CVE-2013-5438 IBM Flex System Manger是一款跨计算，存储和网络资源的集成式系统管理。 IBM Flex System Manger没有正确过滤用户提交的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 IBM Flex System Manger 1.3.0 IBM Flex System Manger 1.1.0 厂商补丁： IBM ----- IBM Flex System Manger 1.3.1已经修复该漏洞，请到厂商的主页下载： http://www.ibm.com...

CVE-2013-5438

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5438

IBM Flex System Manager (FSM) web server versions 1.1.0–1.3 are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML/JavaScript via unsanitized input. The IBM bulletin notes a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) and lists aff...

CVE-2013-5438

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5438: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5541

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager versions 1.1.0 through 1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the web server...

CVE-2013-5424

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

Design/Logic Flaw

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

CVE-2013-5424

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

CVE-2013-5424

The IBM Security Bulletin confirms CVE-2013-5424 affects IBM Flex System Manager (FSM) 1.3.0, where an expired password for the system-level USERID lets an attacker bypass access controls and create rogue accounts or execute tasks. Affected product/version: FSM 1.3.0. Root cause: expired system-l...

PT-2013-5535

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager FSM version 1.3.0 Description The issue allows remote attackers to bypass intended access restrictions. This can lead to the creation of new user accounts or the execution of tasks by leveraging an expired password for...

CVE-2013-5424: Undefined Security Weakness

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...