CVEvulnerability

CVE-2014-6100

3.5 LOW Published 2014-10-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

• ibm security directory server 6.3.1 • ibm security directory server 6.3.1.1 • ibm security directory server 6.3.1.2 • ibm security directory server 6.3.1.3 • ibm security directory server 6.3.1.4 • ibm security directory server 6.3.1.5 • ibm security directory server 6.3.1.6 • ibm tivoli directory server 6.1.0 • ibm tivoli directory server 6.1.0.0 • ibm tivoli directory server 6.1.0.1 • ibm tivoli directory server 6.1.0.2 • ibm tivoli directory server 6.1.0.3 • ibm tivoli directory server 6.1.0.4 • ibm tivoli directory server 6.1.0.5 • ibm tivoli directory server 6.1.0.6 • ibm tivoli directory server 6.1.0.7 • ibm tivoli directory server 6.1.0.8 • ibm tivoli directory server 6.1.0.9 • ibm tivoli directory server 6.1.0.10 • ibm tivoli directory server 6.1.0.11 • ibm tivoli directory server 6.1.0.12 • ibm tivoli directory server 6.1.0.13 • ibm tivoli directory server 6.1.0.14 • ibm tivoli directory server 6.1.0.15 • ibm tivoli directory server 6.1.0.17 • ibm tivoli directory server 6.1.0.18 • ibm tivoli directory server 6.1.0.19 • ibm tivoli directory server 6.1.0.20 • ibm tivoli directory server 6.1.0.21 • ibm tivoli directory server 6.1.0.22 • ibm tivoli directory server 6.1.0.23 • ibm tivoli directory server 6.1.0.24 • ibm tivoli directory server 6.1.0.25 • ibm tivoli directory server 6.1.0.26 • ibm tivoli directory server 6.1.0.27 • ibm tivoli directory server 6.1.0.28 • ibm tivoli directory server 6.1.0.29 • ibm tivoli directory server 6.1.0.30 • ibm tivoli directory server 6.1.0.31 • ibm tivoli directory server 6.1.0.32 • ibm tivoli directory server 6.1.0.33 • ibm tivoli directory server 6.1.0.34 • ibm tivoli directory server 6.1.0.35 • ibm tivoli directory server 6.1.0.36 • ibm tivoli directory server 6.1.0.37 • ibm tivoli directory server 6.1.0.38 • ibm tivoli directory server 6.1.0.39 • ibm tivoli directory server 6.1.0.45 • ibm tivoli directory server 6.1.0.46 • ibm tivoli directory server 6.1.0.47 • ibm tivoli directory server 6.1.0.48 • ibm tivoli directory server 6.1.0.63 • ibm tivoli directory server 6.2 • ibm tivoli directory server 6.2.0 • ibm tivoli directory server 6.2.0.0 • ibm tivoli directory server 6.2.0.1 • ibm tivoli directory server 6.2.0.2 • ibm tivoli directory server 6.2.0.3 • ibm tivoli directory server 6.2.0.4 • ibm tivoli directory server 6.2.0.5 … and 22 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References