Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.
References
- IV46530 vendor-advisory
- ibm-tivoli-cve20140940-xss(92381) vdb-entry
- 70247 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21686189
- IV47175 vendor-advisory