Cross-site Scripting Vulnerability in IBM Tivoli Integrated Portal by IBM
CVE-2016-0303
5.4MEDIUM
Summary
A cross-site scripting (XSS) vulnerability exists in IBM Tivoli Integrated Portal versions 2.2.0.0 through 2.2.0.15, enabling remote attackers to inject arbitrary web scripts or HTML into the application through unspecified attack vectors. This type of vulnerability poses a significant threat as it can lead to the execution of unauthorized commands in a user's browser, ultimately compromising user data and security. Organizations using affected versions should take immediate actions to apply security updates and mitigate potential risks.
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved