CVE-2020-4235

IBM Tivoli Netcool Impact is affected by CVE-2020-4235: cross-site scripting in the Web UI for versions 7.1.0.0 through 7.1.0.17, enabling an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM bulletin specifies remediation by upgrading ...

Security Bulletin: Cross-site scripting vulnerability in IBM Tivoli Netcool Impact (CVE-2020-4235)

Summary There is a cross-site scripting vulnerability in IBM Tivoli Netcool Impact. Vulnerability Details CVEID: CVE-2020-4235 DESCRIPTION: IBM Tivoli Netcool Impact is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri...