NetSight
IP …
medium5.4

CVE-2016-5944

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote …

Impact

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string.

Affected products

VendorProductAffected versions
IbmSpectrum Control
Versions 5.2.8, 5.2.9, 5.2.10, 5.2.10.1
IbmTivoli Storage Productivity Center
Versions 5.2.0, 5.2.1, 5.2.1.1, 5.2.2, 5.2.3, 5.2.4

Weakness classification

CWE-79

References