← Back

CVE-2026-11707

nvd nist
Published: Jul 30, 2026Modified: Aug 18, 2026

JSON object

Loading...
9.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.8
Source: psirt@us.ibm.com (Secondary)

Description

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.

Affected (3)

Ibm
2 products
Websphere Application Server
Tivoli System Automation Application Manager
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Websphere Application Server
From 8.5 to 8.5.5.30
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Websphere Application Server
From 9.0 to 9.0.5.29
Configuration C
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Tivoli System Automation Application Manager
From 4.1.0 to 4.1.0.7
Running on/withPlatform Versions
Ibm
Aix
All versions
Ibm
I
All versions
Ibm
Z/os
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.