CVE-2010-4120

State: Published
Severity: Not scored
Published: Oct 28, 2010
Updated: Aug 7, 2024
Reserved: Oct 28, 2010

Description

Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

68892vdb-entry
68891vdb-entry
68885vdb-entry
ADV-2010-2774vdb-entry
IZ84918vendor-advisory
68890vdb-entry
68884vdb-entry
68893vdb-entry
tivoli-ebusiness-parm1-xss(62750)vdb-entry
44382vdb-entry
68886vdb-entry
1024633vdb-entry
68889vdb-entry
68888vdb-entry
68894vdb-entry
68887vdb-entry
41974third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.