First published: Thu Mar 21 2013(Updated: )
Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Endpoint Manager | <=8.2 | |
IBM Endpoint Manager | =8.0 | |
IBM Endpoint Manager | =8.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0453 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
To fix CVE-2013-0453, upgrade IBM Tivoli Endpoint Manager to version 8.2.1373 or later.
CVE-2013-0453 affects IBM Tivoli Endpoint Manager versions 8.0, 8.1, and all versions prior to 8.2.1373.
Remote authenticated users can exploit the CVE-2013-0453 vulnerability to inject arbitrary web script or HTML.
CVE-2013-0453 is a cross-site scripting (XSS) vulnerability.