CVEvulnerability
CVE-2012-5942
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.
Affected configurations
• ibm tivoli application dependency discovery manager 7.2.0.0
• ibm tivoli application dependency discovery manager 7.2.1
• ibm tivoli application dependency discovery manager 7.2.1.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21625935 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80537 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21625935 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80537 exchange.xforce.ibmcloud.com