Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2012-0740
HistoryApr 22, 2012 - 6:55 p.m.

CVE-2012-0740

2012-04-2218:55:03
CWE-79
ibm
web.nvd.nist.gov
22
ibm
tivoli directory server
tds
xss
vulnerability
web script
html
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
ibmtivoli_directory_serverMatch6.2
OR
ibmtivoli_directory_serverMatch6.2.0.19
OR
ibmtivoli_directory_serverMatch6.2.0.20
OR
ibmtivoli_directory_serverMatch6.2.0.21
OR
ibmtivoli_directory_serverMatch6.3.0
OR
ibmtivoli_directory_serverMatch6.3.0.0
OR
ibmtivoli_directory_serverMatch6.3.0.8
OR
ibmtivoli_directory_serverMatch6.3.0.9
OR
ibmtivoli_directory_serverMatch6.3.0.10
VendorProductVersionCPE
ibmtivoli_directory_server6.2cpe:2.3:a:ibm:tivoli_directory_server:6.2:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.19cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.19:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.20cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.20:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.21cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.21:*:*:*:*:*:*:*
ibmtivoli_directory_server6.3.0cpe:2.3:a:ibm:tivoli_directory_server:6.3.0:*:*:*:*:*:*:*
ibmtivoli_directory_server6.3.0.0cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.0:*:*:*:*:*:*:*
ibmtivoli_directory_server6.3.0.8cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.8:*:*:*:*:*:*:*
ibmtivoli_directory_server6.3.0.9cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.9:*:*:*:*:*:*:*
ibmtivoli_directory_server6.3.0.10cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.10:*:*:*:*:*:*:*

Related

cvelist 1
ibm 1
prion 1
nessus 1
nvd 1
cvelist
cvelist
CVE-2012-0740
2012-04-22 18:00:00
ibm
ibm
Security Bulletin: IBM Tivoli Directory Server Cross-Site scripting vulnerability with the Web Admin Tool (CVE-2012-0740)
2022-09-25 22:31:03
prion
prion
Cross site scripting
2012-04-22 18:55:00
nessus
nessus
IBM Tivoli Directory Server Web Administration Tool Unspecified XSS
2012-04-20 00:00:00
nvd
nvd
CVE-2012-0740
2012-04-22 18:55:03

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON
Related for CVE-2012-0740
cvelist1ibm1prion1nessus1nvd1