CVE-2015-4959: XSS
Published Jan 18, 2016
·Updated
Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected Software
1 affected component
IBM Tivoli Federated Identity Manager=6.2.2
Event History
Jan 18, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4959?
CVE-2015-4959 is considered a moderate severity cross-site scripting vulnerability.
2
How do I fix CVE-2015-4959?
To fix CVE-2015-4959, upgrade to IBM Tivoli Federated Identity Manager version 6.2.2 FP16 or later.
3
What type of attacks can exploit CVE-2015-4959?
CVE-2015-4959 can be exploited by remote attackers to inject arbitrary web script or HTML through crafted URLs.
4
Which versions of IBM Tivoli Federated Identity Manager are affected by CVE-2015-4959?
IBM Tivoli Federated Identity Manager version 6.2.2 before FP16 is affected by CVE-2015-4959.
5
What is the impact of exploiting CVE-2015-4959?
Exploiting CVE-2015-4959 may allow attackers to execute malicious scripts in the context of the user's session.