CVE-2016-8943
01.02.2017, 20:59
IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
| Vendor | Product | Version |
|---|---|---|
| ibm | spectrum_control | 5.2.8 |
| ibm | spectrum_control | 5.2.9 |
| ibm | spectrum_control | 5.2.10 |
| ibm | spectrum_control | 5.2.11 |
| ibm | tivoli_storage_productivity_center | 5.2.0 |
| ibm | tivoli_storage_productivity_center | 5.2.0.0 |
| ibm | tivoli_storage_productivity_center | 5.2.1.0 |
| ibm | tivoli_storage_productivity_center | 5.2.1.1 |
| ibm | tivoli_storage_productivity_center | 5.2.2.0 |
| ibm | tivoli_storage_productivity_center | 5.2.3.0 |
| ibm | tivoli_storage_productivity_center | 5.2.4.0 |
| ibm | tivoli_storage_productivity_center | 5.2.4.1 |
| ibm | tivoli_storage_productivity_center | 5.2.4.1_\+:_ |
| ibm | tivoli_storage_productivity_center | 5.2.5.0 |
| ibm | tivoli_storage_productivity_center | 5.2.5.1 |
| ibm | tivoli_storage_productivity_center | 5.2.6.0 |
| ibm | tivoli_storage_productivity_center | 5.2.7.0 |
| ibm | tivoli_storage_productivity_center | 5.2.7.1 |
𝑥
= Vulnerable software versions