CVE-2006-1384

Published: Mar 24, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

Affected (1)

Products: Ibm: Tivoli Business Systems Manager

Ibm

1 product

Tivoli Business Systems Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Business Systems Manager	Version 3.1

References (14)

http://secunia.com/advisories/19332

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://securitytracker.com/id?1015822

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904

Source: cve@mitre.org

ExploitPatch

http://www.osvdb.org/24069

Source: cve@mitre.org

http://www.securityfocus.com/bid/17210

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1073

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25412

Source: cve@mitre.org

http://secunia.com/advisories/19332