CVE-2015-1988 — Cross-site Scripting in IBM Tivoli Storage Flashcopy Manager

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 62.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Tivoli Storage Flashcopy ManagerIBM Tivoli Storage Manager FOR Virtual Environments
Timeline
PublishedOct 4
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 and Tivoli Storage FlashCopy Manager for VMware 3.1 before 3.1.1.3, 3.2 before 3.2.0.6, and 4.1 before 4.1.3.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages2 packages

▶NVDibm/tivoli_storage_flashcopy_manager3.1.0.0 — 3.1.1.3+2
▶NVDibm/tivoli_storage_manager6.3.0.0 — 6.3.2.5+2

🔴Vulnerability Details

2
GHSA
GHSA-f9x3-xgmh-7jhx: Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6↗2022-05-14
▶
CVEList
CVE-2015-1988: Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6↗2015-10-04
▶
CVE-2015-1988 — Cross-site Scripting in IBM | cvebase