PT-2010-5312

Name of the Vulnerable Software and Affected Versions IBM Tivoli Access Manager for e-business version 6.1.0 before 6.1.0-TIV-TAM-FP0006 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including parm1 to ivt/ivtserver, and the method...

CVE-2010-4120: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via 1 the parm1 parameter to ivt/ivtserver, or the method parameter to 2 acl, 3 domain, ...