Cross-Site Scripting Vulnerability in IBM Tivoli Security Directory Server
CVE-2015-1978

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Directory Server
Vendor
CVE Published:
28 June 2015

Summary

The IBM Tivoli Security Directory Server exhibits a vulnerability that allows remote attackers to inject arbitrary web scripts or HTML through unspecified vectors. This XSS flaw can lead to unauthorized access to sensitive information, manipulation of content, and broader system compromise depending on the attacker's intent. Users of affected versions should upgrade to the latest iFix versions to mitigate this risk.

References

http://www.securitytracker.com/id/1032734
vdb-entryx_refsource_SECTRACK
http://www-01.ibm.com/support/docview.wss?uid=swg21960659
x_refsource_CONFIRM
http://www.securityfocus.com/bid/75435
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.