Cross-Site Scripting Vulnerability in IBM Tivoli and WebSphere Products
CVE-2026-11383

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Tivoli System Automation Application Manager
Vendor
CVE Published:
30 July 2026

What is CVE-2026-11383?

A cross-site scripting vulnerability has been identified in the Administrative Console of IBM Tivoli System Automation Application Manager and IBM WebSphere Application Server. This security flaw may allow attackers to inject malicious scripts into web pages viewed by users, subsequently compromising the integrity and confidentiality of sensitive data. Users are advised to apply patches and follow security best practices to mitigate potential risks.

Affected Version(s)

Tivoli System Automation Application Manager 4.1

References

https://www.ibm.com/support/pages/node/7281073
vendor-advisorypatch

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.