CVE-2012-5939: XSS
First published: Wed Mar 06 2013(Updated: )
Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Application Dependency Discovery Manager | =7.2.0.0 | |
| IBM Tivoli Application Dependency Discovery Manager | =7.2.1 | |
| IBM Tivoli Application Dependency Discovery Manager | =7.2.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-5939?
CVE-2012-5939 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-5939?
To mitigate CVE-2012-5939, upgrade to IBM Tivoli Application Dependency Discovery Manager version 7.2.1.4 or later.
What types of systems are affected by CVE-2012-5939?
CVE-2012-5939 affects IBM Tivoli Application Dependency Discovery Manager versions 7.2.0.0, 7.2.1, and 7.2.1.3.
Can CVE-2012-5939 be exploited remotely?
Yes, CVE-2012-5939 can be exploited remotely by authenticated users through crafted URLs.
What is the nature of the vulnerability described in CVE-2012-5939?
CVE-2012-5939 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web script or HTML.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/remedy
- agent/description
- agent/tags
- agent/event
- agent/first-publish-date
- agent/source
- vendor/ibm
- canonical/ibm tivoli application dependency discovery manager
- version/ibm tivoli application dependency discovery manager/7.2.0.0
- version/ibm tivoli application dependency discovery manager/7.2.1
- version/ibm tivoli application dependency discovery manager/7.2.1.3