CVE-2025-36088

CVE-2025-36088 affects IBM TS4500 and IBM Diamondback Tape Library web GUIs. The issue is a cross-site scripting flaw in the web interface that lets an authenticated user embed arbitrary JavaScript, potentially altering functionality and exposing credentials within a trusted session. Affected ver...

CVE-2024-43192

Summary: CVE-2024-43192 affects IBM Storage TS4500 Library software. Vulnerability: cross-site request forgery (CSRF) in the web GUI could allow an attacker to perform malicious, unauthorized actions using the privileges of a trusted user. Affected versions: TS4500 Library 1.11.0.0 and 2.11.0.0. ...

CVE-2025-36239

IBM Storage TS4500 Library and IBM Diamondback Tape Library are affected by CVE-2025-36239. The IBM security bulletin confirms a cross-site scripting flaw in the Web UI caused by unsanitized URL-derived data on a password-change page, potentially enabling an attacker to inject arbitrary JavaScrip...