Security Bulletin: A cross-site scripting vulnerability affects IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway (CVE-2015-1966)

Summary A cross-site scripting vulnerability affects IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway, caused by improper validation of user-supplied input. Vulnerability Details CVEID: CVE-2015-1966 DESCRIPTION: IBM Tivoli Federated Identity Manage...

CVE-2015-1966

CVE-2015-1966 is a cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) and related IBM Security Access Manager for Mobile. It affects TFIM versions 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, allowing a remote attacker to inject arbitrary scrip...