CVE-2016-8943

Summary

IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationSpectrum Control Standard Select Edition5.1affected
IBM CorporationSpectrum Control Standard Select Edition5.1.1affected
IBM CorporationSpectrum Control Standard Select Edition5.2affected
IBM CorporationSpectrum Control Standard Select Edition5.2.1affected
IBM CorporationSpectrum Control Standard Select Edition5.2.2affected
IBM CorporationSpectrum Control Standard Select Edition5.2.3affected
IBM CorporationSpectrum Control Standard Select Edition5.2.4affected
IBM CorporationSpectrum Control Standard Select Edition5.2.5affected
IBM CorporationSpectrum Control Standard Select Edition5.2.6affected
IBM CorporationSpectrum Control Standard Select Edition5.2.7affected
IBM CorporationSpectrum Control Standard Select Edition5.2.8affected
IBM CorporationSpectrum Control Standard Select Edition5.2.9affected
IBM CorporationSpectrum Control Standard Select Edition5.2.10affected
IBM CorporationSpectrum Control Standard Select Edition5.2.11affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References