CVE-2007-4348
IBM Tivoli Storage Manager Client < 5.3.5.3 - Cross-Site Scripting via CAD Service Log Injection
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38125
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3635
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26221
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27013
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2007-75/advisory
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1018868
Scores
EPSS
0.0122
EPSS Percentile
65.7%
Details
CWE
CWE-79
Status
published
Products (1)
ibm/tivoli_storage_manager_client
< 5.3.5.3
Published
Oct 30, 2007
Tracked Since
Feb 18, 2026