Lucene search
MitreCVE-2007-6407HistoryDec 17, 2007 - 6:46 p.m.
CVE-2007-6407
2007-12-1718:46:00
CWE-79
mitre
web.nvd.nist.gov
19
ibm
tivoli
provisioning manager
xss
vulnerabilities
cve-2007-6407
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
62.1%
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers to inject arbitrary web script or HTML via the (1) “assess modification,” (2) user-id, and other unspecified fields to the /tpmx URI; or (3) involving unspecified vectors related to “error processing.”
Affected configurations
Node
ibmtivoli_provisioning_manager_express
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | tivoli_provisioning_manager_express | * | cpe:2.3:a:ibm:tivoli_provisioning_manager_express:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2007-12-17 18:46:00
nvd
nvd
CVE-2007-6407
2007-12-17 18:46:00
cvelist
cvelist
CVE-2007-6407
2007-12-17 18:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
62.1%
Related for CVE-2007-6407