Description
Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program.
References
- 48352 third-party-advisory
- 52514 vdb-entry
- tem-scheduleparam-xss(74039) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21587743