First published: Sun Oct 19 2014(Updated: )
Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Security Directory Server | =6.3.1 | |
IBM Security Directory Server | =6.3.1.1 | |
IBM Security Directory Server | =6.3.1.2 | |
IBM Security Directory Server | =6.3.1.3 | |
IBM Security Directory Server | =6.3.1.4 | |
IBM Security Directory Server | =6.3.1.5 | |
IBM Security Directory Server | =6.3.1.6 | |
IBM Tivoli Directory Server | =6.1.0 | |
IBM Tivoli Directory Server | =6.1.0.0 | |
IBM Tivoli Directory Server | =6.1.0.1 | |
IBM Tivoli Directory Server | =6.1.0.2 | |
IBM Tivoli Directory Server | =6.1.0.3 | |
IBM Tivoli Directory Server | =6.1.0.4 | |
IBM Tivoli Directory Server | =6.1.0.5 | |
IBM Tivoli Directory Server | =6.1.0.6 | |
IBM Tivoli Directory Server | =6.1.0.7 | |
IBM Tivoli Directory Server | =6.1.0.8 | |
IBM Tivoli Directory Server | =6.1.0.9 | |
IBM Tivoli Directory Server | =6.1.0.10 | |
IBM Tivoli Directory Server | =6.1.0.11 | |
IBM Tivoli Directory Server | =6.1.0.12 | |
IBM Tivoli Directory Server | =6.1.0.13 | |
IBM Tivoli Directory Server | =6.1.0.14 | |
IBM Tivoli Directory Server | =6.1.0.15 | |
IBM Tivoli Directory Server | =6.1.0.17 | |
IBM Tivoli Directory Server | =6.1.0.18 | |
IBM Tivoli Directory Server | =6.1.0.19 | |
IBM Tivoli Directory Server | =6.1.0.20 | |
IBM Tivoli Directory Server | =6.1.0.21 | |
IBM Tivoli Directory Server | =6.1.0.22 | |
IBM Tivoli Directory Server | =6.1.0.23 | |
IBM Tivoli Directory Server | =6.1.0.24 | |
IBM Tivoli Directory Server | =6.1.0.25 | |
IBM Tivoli Directory Server | =6.1.0.26 | |
IBM Tivoli Directory Server | =6.1.0.27 | |
IBM Tivoli Directory Server | =6.1.0.28 | |
IBM Tivoli Directory Server | =6.1.0.29 | |
IBM Tivoli Directory Server | =6.1.0.30 | |
IBM Tivoli Directory Server | =6.1.0.31 | |
IBM Tivoli Directory Server | =6.1.0.32 | |
IBM Tivoli Directory Server | =6.1.0.33 | |
IBM Tivoli Directory Server | =6.1.0.34 | |
IBM Tivoli Directory Server | =6.1.0.35 | |
IBM Tivoli Directory Server | =6.1.0.36 | |
IBM Tivoli Directory Server | =6.1.0.37 | |
IBM Tivoli Directory Server | =6.1.0.38 | |
IBM Tivoli Directory Server | =6.1.0.39 | |
IBM Tivoli Directory Server | =6.1.0.45 | |
IBM Tivoli Directory Server | =6.1.0.46 | |
IBM Tivoli Directory Server | =6.1.0.47 | |
IBM Tivoli Directory Server | =6.1.0.48 | |
IBM Tivoli Directory Server | =6.1.0.63 | |
IBM Tivoli Directory Server | =6.2 | |
IBM Tivoli Directory Server | =6.2.0 | |
IBM Tivoli Directory Server | =6.2.0.0 | |
IBM Tivoli Directory Server | =6.2.0.1 | |
IBM Tivoli Directory Server | =6.2.0.2 | |
IBM Tivoli Directory Server | =6.2.0.3 | |
IBM Tivoli Directory Server | =6.2.0.4 | |
IBM Tivoli Directory Server | =6.2.0.5 | |
IBM Tivoli Directory Server | =6.2.0.6 | |
IBM Tivoli Directory Server | =6.2.0.7 | |
IBM Tivoli Directory Server | =6.2.0.8 | |
IBM Tivoli Directory Server | =6.2.0.10 | |
IBM Tivoli Directory Server | =6.2.0.11 | |
IBM Tivoli Directory Server | =6.2.0.12 | |
IBM Tivoli Directory Server | =6.2.0.13 | |
IBM Tivoli Directory Server | =6.2.0.14 | |
IBM Tivoli Directory Server | =6.2.0.15 | |
IBM Tivoli Directory Server | =6.2.0.19 | |
IBM Tivoli Directory Server | =6.2.0.20 | |
IBM Tivoli Directory Server | =6.2.0.21 | |
IBM Tivoli Directory Server | =6.2.0.22 | |
IBM Tivoli Directory Server | =6.2.0.38 | |
IBM Tivoli Directory Server | =6.3.0 | |
IBM Tivoli Directory Server | =6.3.0.0 | |
IBM Tivoli Directory Server | =6.3.0.1 | |
IBM Tivoli Directory Server | =6.3.0.2 | |
IBM Tivoli Directory Server | =6.3.0.8 | |
IBM Tivoli Directory Server | =6.3.0.9 | |
IBM Tivoli Directory Server | =6.3.0.10 | |
IBM Tivoli Directory Server | =6.3.0.32 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.