Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-10-19 01:55
Updated : 2024-02-04 18:35
NVD link : CVE-2014-6100
Mitre link : CVE-2014-6100
CVE.ORG link : CVE-2014-6100
JSON object : View
Products Affected
ibm
- tivoli_directory_server
- security_directory_server
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')