CVE Feed

    Dashboard / CVE / CVE-2010-4120

    CVE-2010-4120

    Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.

    Published:Oct 28, 2010
    Last Modified:Apr 11, 2025
    EPS:Oct 28, 2010
    EPSS Score:0.04034
    CVSS Score:4.3

    Affected Products

    Vendor
    Ibm
    Product
    Tivoli Access Manager For E-business

    Exploits

    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ84918http://www.securityfocus.com/bid/44382http://www-01.ibm.com/support/docview.wss?uid=swg1IZ84918http://www.securityfocus.com/bid/44382https://www.exploit-db.com/exploits/34908https://www.exploit-db.com/exploits/34907https://www.exploit-db.com/exploits/34909https://www.exploit-db.com/exploits/34910https://www.exploit-db.com/exploits/34911https://www.exploit-db.com/exploits/34912https://www.exploit-db.com/exploits/34913https://www.exploit-db.com/exploits/34914https://www.exploit-db.com/exploits/34915https://www.exploit-db.com/exploits/34916https://www.exploit-db.com/exploits/34917

    Related CVEs

    CVE-2017-1489 (CVSS 6.1) — IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vu…
    CVE-2011-0494 (CVSS 5) — Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-T…
    CVE-2010-4622 (CVSS 5) — Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TI…
    CVE-2010-4623 (CVSS 4) — WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authentica…
    CVE-2010-0311 (CVSS 6.8) — Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java Sys…
    CVE-2008-5257 (CVSS 4.3) — webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a de…
    CVE-2006-0513 (CVSS 5) — Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager…
    CVE-2004-2558 (CVSS 7.5) — Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.…

    References

    http://osvdb.org/68884
    http://osvdb.org/68885
    http://osvdb.org/68886
    http://osvdb.org/68887
    http://osvdb.org/68888
    http://osvdb.org/68889
    http://osvdb.org/68890
    http://osvdb.org/68891
    http://osvdb.org/68892
    http://osvdb.org/68893
    http://osvdb.org/68894
    http://secunia.com/advisories/41974
    http://securitytracker.com/id?1024633
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ84918
    http://www.securityfocus.com/bid/44382
    http://www.vupen.com/english/advisories/2010/2774
    https://exchange.xforce.ibmcloud.com/vulnerabilities/62750
    http://osvdb.org/68884
    http://osvdb.org/68885
    http://osvdb.org/68886
    http://osvdb.org/68887
    http://osvdb.org/68888
    http://osvdb.org/68889
    http://osvdb.org/68890
    http://osvdb.org/68891
    http://osvdb.org/68892
    http://osvdb.org/68893
    http://osvdb.org/68894
    http://secunia.com/advisories/41974
    http://securitytracker.com/id?1024633
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ84918
    http://www.securityfocus.com/bid/44382
    http://www.vupen.com/english/advisories/2010/2774
    https://exchange.xforce.ibmcloud.com/vulnerabilities/62750

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High