NetSight
IP …
medium4.3Public exploit code

CVE-2014-3080

Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allow remote atta…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to kvm.cgi or (2) the key parameter to avctalert.php.

Affected products

VendorProductAffected versions
IbmGlobal Console Manager 16 Firmware
through 1.20.0.22575
IbmGlobal Console Manager 32 Firmware
through 1.20.0.22575

Weakness classification

CWE-79

References