XSS in IBM Tivoli Application Dependency Discovery Manager
CVE-2012-5942
Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (58.5th percentile) — read the EPSS interpretation.
Affected products
- Ibm Tivoli_application_dependency_discovery_manager — versions 7.2.0.0, 7.2.1, 7.2.1.3
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)