XSS in Ibm Tivoli_federated_identity_manager

CVE-2015-1966

Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security Access Manager for Mobile and other products, allow remote…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (58.9th percentile) — read the EPSS interpretation.

Affected products

Ibm Tivoli_federated_identity_manager — versions 6.2.0, 6.2.1, 6.2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
IV74198 (vendor-advisory, x_refsource_AIXAPAR)
IV74199 (vendor-advisory, x_refsource_AIXAPAR)
75537 (vdb-entry, x_refsource_BID)
IV74200 (vendor-advisory, x_refsource_AIXAPAR)
1032767 (vdb-entry, x_refsource_SECTRACK)