CVE

Id
68349  
CVE No.
CVE-2014-0940  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.  
Phase
Assigned (20140106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
658330 68349 CVE-2014-0940 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21686189  View
658331 68349 CVE-2014-0940 AIXAPAR:IV46530  View
658332 68349 CVE-2014-0940 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IV46530  View
658333 68349 CVE-2014-0940 AIXAPAR:IV47175  View
658334 68349 CVE-2014-0940 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IV47175  View
658335 68349 CVE-2014-0940 BID:70247  View
658336 68349 CVE-2014-0940 URL:http://www.securityfocus.com/bid/70247  View
658337 68349 CVE-2014-0940 XF:ibm-tivoli-cve20140940-xss(92381)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14772 JVNDB-2014-003647 IBM Rational Software Architect Design Manager および Rational Rhapsody Design Manager における任意のコードを実行される脆弱性 IBM Rational Software Architect Design Manager および Rational Rhapsody Design Manager には、任意のコードを実行される脆弱性が存在します。 CVE-2014-0948 68349 6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003647.html  View