Vulnerability Details CVE-2012-3297
Cross-site scripting (XSS) vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.securitytracker.com/id?1027850
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77291
- https://www.ibm.com/support/docview.wss?uid=swg21618972
- http://www.securitytracker.com/id?1027850
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77291
- https://www.ibm.com/support/docview.wss?uid=swg21618972
Products affected by CVE-2012-3297
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.3