medium4.3
CVE-2012-0715
Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JView…
Impact
Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Ilog Jviews Gantt | All versions |
| Ibm | Tivoli Change And Configuration Management Database | Version 7.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IV16174
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV16174
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73587
- http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IV16174
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV16174
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73587