PT-2014-3958
CVE-2014-0940
·
Published
2014-10-07
·
Updated
2017-08-29
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Service Automation Manager version 7.2.2.2
Description
The issue involves multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. This can be achieved through vectors involving the REST API or the Self Service UI.
Recommendations
For IBM Tivoli Service Automation Manager version 7.2.2.2, apply the fix 7.2.2.2-TIV-TSAM-LA0041 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾