CVE-2009-3521 - Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphere (ITCAM) 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphere (ITCAM) 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors

Published Oct 1, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.03%

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphere (ITCAM) 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://secunia.com/advisories/36901
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126
vendor-advisoryx_refsource_AIXAPARPatchVendor Advisory
http://www.securityfocus.com/bid/36551
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2797
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3503
Advisory

Link	Providers	Tags
http://secunia.com/advisories/36901		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126		vendor-advisoryx_refsource_AIXAPARPatchVendor Advisory
http://www.securityfocus.com/bid/36551		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2797		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3503		Advisory