exploitDog

CVE-2007-4348

Опубликовано: 30 окт. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_storage_manager_client:*:*:windows:*:*:*:*:*

Версия до 5.3.5.3 (включая)

cpe:2.3:a:ibm:tivoli_storage_manager_client:*:*:windows:*:*:*:*:*

Версия до 5.4.1.2 (включая)

EPSS

Процентиль: 64%

0.00463

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-pmmx-wv98-xg9f

github

почти 4 года назад

Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.

EPSS

Процентиль: 64%

0.00463

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79