CVE-2014-3031
Summary
by MITRE
Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 03/06/2018
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xx Xxx-xxxx-xxxx Xxxxxxxxxx X Xxxxxxxx Xxxxx-xxxx Xxxxxxxxx Xxxx Xxxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxx Xxxxxxx Xxxxxxx X.x.x Xxxxx Xx X.x.x.x Xxxx Xxx X.x.x Xxxxx Xx X.x.x.x Xxx. Xxxx Xxxxxxxx Xxxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxx Xx Xxxx Xxxx Xxxxxxx Xxxxxxxxx Xxxxxxx Xxxx, Xxxxxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxx Xx Xxx Xxxxxxxxxxxx Xxx Xxxx Xxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxx Xx Xxx Xxxxxxxxxxx'x Xxxxxxxx Xx Xxxx-xxxxxxxx Xxxxx Xxxxxx Xxx Xxxxxxxxxx, Xxxxxxxx Xx Xxxxxx Xxx Xxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxxx Xxxx Xxxxxxx Xx Xxx Xxxxxxx Xx Xxxxx Xxxxx' Xxxxxxxx.
Xxx Xxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxx Xxx-xx, Xxxxx Xxxxxxxxxxxx Xxxxxxxxx Xxxxx-xxxx Xxxxxxxxx Xxxxx Xx Xxx Xxxxxxxxxxxx. Xxxx Xxxxxxxx Xxxxxx Xxxx Xx Xxxxxxxxxxx Xxxxx Xx Xxxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxxx Xxxxx Xxxxxx Xxxxxxxxxxxxx Xx Xxxx Xxxxxxx Xxx Xxxxxxx. Xx Xxx Xxxxxxx Xx Xxx Xxxxxx Xxxxxxxx Xxxxxxx Xxxxxxx, Xxx Xxxx Xxxxxxxxx Xxxx Xxx Xxxxxx Xxxxxxxxx Xxx Xxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx, Xxxxxxxx Xxxxxxxxx Xx Xxxxx Xxxxxxxxx Xxxxxxx Xxxx Xxxxxxx Xxx Xxxxxxx Xxxxxx Xxx Xxxxxx'x Xxxxxxx Xxxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxx Xx Xxx Xxxxxx Xxxxx Xxxx Xxxxxxxxxxx Xxxx Xxxxx Xxxxxxxxx Xxxxx Xxxxxxxxxxx Xx Xxxxxxx Xxxx Xxxxxxxxxxxxx, Xxxxxx Xxxx Xxxxxxxxxxx, Xxx Xxxxxx Xxx Xx Xxxxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxx-xxxx-xxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxx Xxxxxxxxx, Xx Xx Xxxxxxxx Xxxxxxxxx Xxxx Xxx Xxxxxxxxxx Xx Xxxxxxxxxx Xxxx Xxxxxxxx, Xxxxx Xxxxxxxxx Xxxxxxxxxxx, Xxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxxxxxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxx Xxxxxxxx Xx Xxxxxxxxxxx Xxxxxxx Xxxx, Xxx Xxxxxxxx Xxxxxxx Xxx Xxxxxx Xxxxxxx Xxxxxxx, Xxxxxx Xxxxxxxxxxx Xxxx, Xx Xxxxxxxx Xxxxx Xx Xxxxxxxxx Xxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxx Xxxxxx Xxxxxxxx Xxxxxxx Xxxxxxx Xx Xxxxxxxx, Xx Xx Xxx Xxxxxxxxxx Xxx Xxxxxxxx Xx Xxxxxxxx-xxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxx Xx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxx. Xxx Xxxxxx Xxxxxx Xxxxxxx Xxx Xxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxxxxxxxx Xx Xx Xxx Xx Xxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxx.
Xxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xxx Xxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xxx Xxxxx Xxx Xxxxxxxx X.x.x.x Xxxx Xxx X.x.x.x Xxx. Xxxxxxxxxxxx, Xxxxxxx Xxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxx Xx Xxxxxxx Xxx Xxxxxx Xxxxxxxxx Xxx Xxxxxxxx, Xxxxx Xxxxxxxx Xxxxx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxx Xxxxxxxxx Xxxxxxxxxxxx Xxxxxxxx. Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxxx Xxxxxxx Xxxx Xxxxxxxxx Xxxxxxxxx Xxx Xxxxx Xx Xxxxxxxx Xxxxxxxxxx Xxxxx Xxx Xxx Xxxxxxxxxx Xx Xxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxx. Xxxx Xx Xxx&xx Xxxxxxxxx Xxxxxxxxxxx, Xxxx Xxxxxxxxxxxxx Xxxx Xx Xxxxxxxxx Xxxxx.xxx Xxx Xxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxx, Xxx Xxxxx.xxx Xxx Xxxxxx Xxxxxxxxx Xxxxxxx, Xxxxxx Xx X Xxxxxxxxxxx Xxxxxxx Xxx Xxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx Xxxxxxxxx.