CVE-2014-6161

Cross-site scripting XSS vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-6161

Cross-site scripting XSS vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-6161

IBM Tivoli Netcool/Impact 6.1.1 is affected by a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. A fix is available in 6.1.1.1-TIV-NCI-IF0001; affected component is the 6.1.1 web-facing interface, with the u...

PT-2014-7076

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/Impact version 6.1.1 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Recommendations For IBM Tivoli Netcool/Impact version 6.1.1, updat...

CVE-2014-6161: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

IBM Tivoli Netcool Service Quality Manager Cross Site Scripting And HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/32233/info IBM Tivoli Netcool Service Quality Manager is prone to multiple cross-site scripting and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...

CVE-2014-0942

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941...

CVE-2014-0941

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942...

Cross site scripting

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941...

Cross site scripting

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942...

CVE-2014-0942

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941...

CVE-2014-0941

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942...

CVE-2014-0942

CVE-2014-0942 is an XSS vulnerability in the IBM Netcool/OMNIbus Web GUI (webtop/eventviewer/eventViewer.jsp) affecting version 7.4.0 before FP2. The flaw lets remote authenticated users inject arbitrary web script or HTML via a crafted URL. The connected records confirm the same issue as CVE-201...

CVE-2014-0941

CVE-2014-0941 is an XSS vulnerability in IBM Netcool/OMNIbus 7.4.0 Web GUI (webtop/eventviewer/eventViewer.jsp). The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Affected version is 7.4.0 before FP2; remediation is to apply FP2 (or later hotfix...

PT-2014-3959

Name of the Vulnerable Software and Affected Versions IBM Netcool/OMNIbus version 7.4.0 before FP2 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Recommendations For IBM Netcool/OMNIbus version 7.4...

CVE-2014-0942: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941...

PT-2014-3960

Name of the Vulnerable Software and Affected Versions IBM Netcool/OMNIbus version 7.4.0 before FP2 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This is due to a vulnerability in the...

CVE-2014-0941: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942...

IBM Tivoli Netcool/OMNIbus多个安全漏洞

IBM Tivoli Netcool/OMNIbus是运营管理软件，对业务应用、网络设备、Internet 协议和安全设备提供了集中式的管理。 1）部分未明输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞进行跨站脚本攻击，获取敏感信息或执行任意代码。 2）相关事件查看器的输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞进行跨站脚本攻击，获取敏感信息或执行任意代码。 3）EAL中存在多个未明错误。 0 IBM Tivoli Netcool/OMNIbus 7.x IBM Tivoli Netcool/OMNIbus 7.4.0 Fix Pack 2已经修复该漏洞，建议用户下载更新：...