Cross-Site Scripting Vulnerability in IBM Tivoli Application Dependency Discovery Manager
CVE-2016-8927
5.4MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 14 April 2017
Summary
IBM Tivoli Application Dependency Discovery Manager versions 7.2.2 and 7.3 are susceptible to a cross-site scripting vulnerability that permits attackers to inject arbitrary JavaScript code through the web interface. This exploitation can modify application behavior and potentially lead to the disclosure of sensitive user credentials during a trusted session. Users are encouraged to apply available patches to mitigate the risks associated with this vulnerability.
Affected Version(s)
Tivoli Application Dependency Discovery Manager 7.2
Tivoli Application Dependency Discovery Manager 7.2.1
Tivoli Application Dependency Discovery Manager 7.2.2
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved