Security Bulletin: Security vulnerabilities related to Cross-site scripting identified in Tivoli Integrated Portal shipped with Tivoli Network Manager IP Edition (CVE-2014-6151, CVE-2014-6152)

Summary Tivoli Network Manager IP Edition shipped with Tivoli Integrated Portal has released security vulnerability fixes. Vulnerability Details There are two vulnerabilities reported for Tivoli Integrated Portal on Cross-site scripting, as listed below. CVE ID: CVE-2014-6151 DESCRIPTION: HTTP...

CVE-2014-6152

IBM Tivoli Integrated Portal (TIP) 2.2.x contains a reflected XSS vulnerability (CVE-2014-6152) that can be exploited by remote authenticated users via unspecified vectors. The IBM Security Bulletin related to Tivoli Network Manager IP Edition notes TIP XSS fixes and recommends applying the TIP i...