Medium · 5.4 CVE-2026-11383 EUVD-2026-51140GHSA-72hc-pg85-56c6

Cross-site Scripting in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager

Published Jul 30, 2026 · Updated Jul 30, 2026 · Assigned by ibm

Vendor: IBM Product: Tivoli System Automation Application Manager

Description

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.

Affected products

Vendor	Product	Affected	Fixed
IBM	Tivoli System Automation Application Manager	4.1	—

Advisories 1

WID-SEC-2026-2050 IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026

References

https://www.ibm.com/support/pages/node/7281073 vendor-advisory patch