CVE-2012-0740

Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: Apr 22, 2012
Updated: Apr 13, 2023
CVE: CVE-2012-0740
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
ibm / tivoli_directory_server	6.3.0.8	6.3.0.8.x
ibm / tivoli_directory_server	6.2.0.21	6.2.0.21.x
ibm / tivoli_directory_server	6.3.0.9	6.3.0.9.x
ibm / tivoli_directory_server	6.3.0.0	6.3.0.0.x
ibm / tivoli_directory_server	6.2.0.19	6.2.0.19.x
ibm / tivoli_directory_server	6.3.0.10	6.3.0.10.x
ibm / tivoli_directory_server	6.2	6.2.x
ibm / tivoli_directory_server	6.2.0.20	6.2.0.20.x
ibm / tivoli_directory_server	6.3.0	6.3.0.x

http://www-01.ibm.com/support/docview.wss?uid=swg24032290
http://www-01.ibm.com/support/docview.wss?uid=swg24032291
http://www.ibm.com/support/docview.wss?uid=swg1IO14508
http://www.ibm.com/support/docview.wss?uid=swg1IO16016
http://www.securitytracker.com/id?1026880
https://exchange.xforce.ibmcloud.com/vulnerabilities/74610

Vulnerability Database

290,206

CVE-2012-0740