Cross-Site Scripting Vulnerability in IBM Tivoli Application Dependency Discovery Manager
CVE-2016-8927

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Tivoli Application Dependency Discovery Manager
Vendor
CVE Published:
14 April 2017

Summary

IBM Tivoli Application Dependency Discovery Manager versions 7.2.2 and 7.3 are susceptible to a cross-site scripting vulnerability that permits attackers to inject arbitrary JavaScript code through the web interface. This exploitation can modify application behavior and potentially lead to the disclosure of sensitive user credentials during a trusted session. Users are encouraged to apply available patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

Tivoli Application Dependency Discovery Manager 7.2

Tivoli Application Dependency Discovery Manager 7.2.1

Tivoli Application Dependency Discovery Manager 7.2.2

References

http://www.ibm.com/support/docview.wss?uid=swg22001579&my...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/97629
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.