2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Tivoli Endpoint Manager TEM 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program...
CVE-2012-0719
CVE-2012-0719: IBM Tivoli Endpoint Manager (TEM) 8 prior to 8.2 patch 3 is vulnerable to a cross-site scripting (XSS) flaw in the webreports component. The issue arises from untrusted input in the ScheduleParam parameter, enabling an attacker to inject arbitrary script/HTML. Connected sources con...