CVE-2016-8927

Published: Apr 14, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118540.

Affected (12)

Products: Ibm: Tivoli Application Dependency Discovery Manager

Ibm

1 product

Tivoli Application Dependency Discovery Manager

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.0
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.1
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.2
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.3
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.4
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.5
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2
Ibm Tivoli Application Dependency Discovery Manager	Version 7.3.0.0
Ibm Tivoli Application Dependency Discovery Manager	Version 7.3.0.1
Ibm Tivoli Application Dependency Discovery Manager	Version 7.3.0.2
Ibm Tivoli Application Dependency Discovery Manager	Version 7.3.0.3
Ibm Tivoli Application Dependency Discovery Manager	Version 7.3.0