Skip to content
OpenAdvisories
Medium · 6.1 CVE-2019-4137 EUVD-2019-13744GHSA-x3hp-xqcg-6wvr

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to emb…

Published May 29, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158333.

Affected products

VendorProductAffectedFixed
IBM Spectrum Control Standard Edition 5.2.13, 5.2.14, 5.2.15, 5.2.16, 5.2.15.2, 5.2.17.0, 5.2.17.1, 5.2.17.2, 5.3.0.1, 5.3.15.3.2 —

References