CVE-2016-6046

Published: Feb 1, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (19)

Products: Ibm: Tivoli Storage Manager

Ibm

1 product

Tivoli Storage Manager

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Manager	Version 6.4.1.1
Ibm Tivoli Storage Manager	Version 6.4.1
Ibm Tivoli Storage Manager	Version 6.4.2.1
Ibm Tivoli Storage Manager	Version 6.4.2.2
Ibm Tivoli Storage Manager	Version 6.4.2.3
Ibm Tivoli Storage Manager	Version 6.4.2.4
Ibm Tivoli Storage Manager	Version 6.4.2
Ibm Tivoli Storage Manager	Version 7.1.0.1
Ibm Tivoli Storage Manager	Version 7.1.0.2
Ibm Tivoli Storage Manager	Version 7.1.1.1
Ibm Tivoli Storage Manager	Version 7.1.1.2
Ibm Tivoli Storage Manager	Version 7.1.3.1
Ibm Tivoli Storage Manager	Version 7.1.3.2
Ibm Tivoli Storage Manager	Version 7.1.3
Ibm Tivoli Storage Manager	Version 7.1.4.1
Ibm Tivoli Storage Manager	Version 7.1.4.2
Ibm Tivoli Storage Manager	Version 7.1.4
Ibm Tivoli Storage Manager	Version 7.1.7
Ibm Tivoli Storage Manager	Version 7.1