CVE-2016-2939

CVE-2016-2939 corresponds to a cross-site scripting vulnerability affecting IBM iNotes (and IBM Domino in CNVD coverage) where the web UI accepts unfiltered user input, allowing an attacker to inject arbitrary JavaScript. The published descriptions state that this could enable script execution wi...

CVE-2016-8943

CVE-2016-8943 is a cross-site scripting vulnerability in IBM Tivoli Storage Productivity Center, affecting IBM Spectrum Control formerly Tivoli Storage Productivity Center. The IBM Security bulletin details that the vulnerability allows an attacker to inject arbitrary JavaScript into the Web UI, ...

CVE-2016-8943

IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-2938

IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6000

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5884

IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-8936

IBM Social Rendering Templates for Digital Data Connector is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5980

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-9731

IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5948

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6030

Concrete details found: CVE-2016-6030 affects IBM Jazz Foundation (Jazz/CLM family). The vulnerability is a cross-site scripting flaw in the Web UI that can let an attacker embed arbitrary JavaScript code, potentially leading to credentials disclosure within a trusted session. Affected products/v...

CVE-2016-6113

IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cisco Firepower Device Manager Arbitrary Audit Log Entry Vulnerability

A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense FTD Firepower Device Manager FDM could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. The vulnerability is due to inadequate input validation. An attacker could exploit this...

IBM Tivoli Storage Manager Operations Center Cross-Site Scripting Vulnerability

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A cross-site scripting vulnerability exists ...

IBM Web Content Manager Production Analytics Cross-Site Scripting Vulnerability

IBM Web Content Manager Production Analytics is a product of IBM Corporation, USA. A cross-site scripting vulnerability exists in IBM Web Content Manager Production Analytics, which can be exploited by an attacker to inject arbitrary JavaScript code into the Web UI...

pcs: Cross-Site Request Forgery in web UI

A Cross-Site Request Forgery CSRF flaw was found in the pcsd web UI. A remote attacker could provide a specially crafted web page that, when visited by a user with a valid pcsd session, would allow the attacker to trigger requests on behalf of the user, for example removing resources or...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-10505)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.5 and 7.6. An attacker can exploit this vulnerability to inject arbitrary JavaScript code into the...

CVE-2016-5920

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5920

CVE-2016-5920 is an XSS in the Web UI of IBM Financial Transaction Manager (FTM) for ACH Services. The vulnerability affects FTM for ACH 3.0.0.x (before fp0015) and 3.0.1.0 (before iFix0002), enabling remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM’s...