Vulnerability Details CVE-2025-36088
IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.3%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2025-36088
-
cpe:2.3:h:ibm:diamondback_tape_library:-
-
cpe:2.3:h:ibm:storage_ts4500_library:-
-
cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.0-b00
-
cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.1-c00
-
cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.2-b00
-
cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.4-c00
-
cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.10.00-f00
-
cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.11.0.0-d00
-
cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.11.0.1-c00
-
cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.11.0.2-c00