← back
CVE-2014-0940

CVE-2014-0940

EPSS 1.2%
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/92381http://www-01.ibm.com/support/docview.wss?uid=swg1IV46530http://www-01.ibm.com/support/docview.wss?uid=swg1IV47175http://www-01.ibm.com/support/docview.wss?uid=swg21686189http://www.securityfocus.com/bid/70247