CVE-2015-1966

State: Published
Severity: Not scored
Published: Jul 4, 2015
Updated: Aug 6, 2024
Reserved: Feb 19, 2015

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security Access Manager for Mobile and other products, allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to the (1) ERROR_DESCRIPTION and (2) TOKEN:RelayState macros.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://www-01.ibm.com/support/docview.wss?uid=swg21959071
IV74198vendor-advisory
IV74199vendor-advisory
75537vdb-entry
IV74200vendor-advisory
1032767vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.