Security Bulletin: Multiple vulnerabilities in Product IBM Application Manager For Smart Business 1.2.1 (CVE-2013-0548, CVE-2013-0551, CVE-2013-0576 , CVE-2013-2960, CVE-2013-2961, CVE-2012-2190, CVE-2012-2191, CVE-2012-2203)

Abstract Several vulnerabilities have been resolved in the Basic Services component of IBM Tivoli Monitoring. These vulnerabilities could have potentially caused a denial of service or Cross Site Scripting XSS exposure. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0548 DESCRIPTION: Security sc...

CVE-2013-0548

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

Buffer overflow

Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...

CVE-2013-0548

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

PT-2013-4065

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.0 through 6.2.3 before FP3 IBM Application Manager for Smart Business version 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 Description The issue allows remote attackers to perform unspecified redirection of HTTP...

CVE-2013-0548: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

PT-2013-4064

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.0 through 6.2.3 before FP3 IBM Application Manager for Smart Business version 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 Description The issue allows remote attackers to cause a denial of service via a crafted...

PT-2013-2423

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.0 through 6.2.3 before FP3 IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager version 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 Description The issue allows remote...

PT-2013-2421

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.0 through 6.2.3 before FP3 IBM Application Manager for Smart Business version 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 Description The issue allows remote attackers to inject arbitrary web script or HTML via...