CVE-2016-5944

Published: Sep 26, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string.

Affected (16)

Products: Ibm: Spectrum Control, Tivoli Storage Productivity Center

Ibm

2 products

Spectrum Control

Tivoli Storage Productivity Center

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Control	Version 5.2.10.1
Ibm Spectrum Control	Version 5.2.10
Ibm Spectrum Control	Version 5.2.8
Ibm Spectrum Control	Version 5.2.9

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Productivity Center	Version 5.2.0
Ibm Tivoli Storage Productivity Center	Version 5.2.1.1
Ibm Tivoli Storage Productivity Center	Version 5.2.1
Ibm Tivoli Storage Productivity Center	Version 5.2.2
Ibm Tivoli Storage Productivity Center	Version 5.2.3
Ibm Tivoli Storage Productivity Center	Version 5.2.4.1
Ibm Tivoli Storage Productivity Center	Version 5.2.4
Ibm Tivoli Storage Productivity Center	Version 5.2.5.1
Ibm Tivoli Storage Productivity Center	Version 5.2.5
Ibm Tivoli Storage Productivity Center	Version 5.2.6
Ibm Tivoli Storage Productivity Center	Version 5.2.7.1
Ibm Tivoli Storage Productivity Center	Version 5.2.7