Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 30/10/2007 Updated: 29/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Subscribe to Tivoli Storage Manager Client

Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote malicious users to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm tivoli storage manager client

CWE-79 http://secunia.com/secunia_research/2007-75/advisory http://secunia.com/advisories/27013 http://www.securityfocus.com/bid/26221 http://www.securitytracker.com/id?1018868 http://www.vupen.com/english/advisories/2007/3635 https://exchange.xforce.ibmcloud.com/vulnerabilities/38125 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-4348

Vulnerability Summary

References

Vulmon Search

About

Products

Connect