Cross-Site Scripting Vulnerabilities in IBM Tivoli Access Manager
CVE-2010-4120

Currently unrated

Key Information:

Vendor: IBM
Status: Tivoli Access Manager For E-business
Vendor: CVE Published:; 28 October 2010

What is CVE-2010-4120?

Multiple cross-site scripting vulnerabilities exist within the TAM console of IBM Tivoli Access Manager for e-business. These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML through various parameters including 'parm1' in the ivtserver endpoint and method parameters in acl, domain, group, gso, gsogroup, os, pop, rule, user, or webseal endpoints. Exploiting these vulnerabilities could lead to unauthorized actions and theft of sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch