CVE-2025-36248

IBM Copy Services Manager 6.3.13 is vulnerable to cross-site scripting (CWE-79). The issue allows an unauthenticated user to embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected product/version: IBM Copy Services Manager 6.3.13...