CVE-2015-1988
IBM Tivoli Storage FlashCopy Manager 3.1.0.0-3.1.1.3 XSS via Crafted URL
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 and Tivoli Storage FlashCopy Manager for VMware 3.1 before 3.1.1.3, 3.2 before 3.2.0.6, and 4.1 before 4.1.3.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21967532
Scores
EPSS
0.0078
EPSS Percentile
52.2%
Details
CWE
CWE-79
Status
published
Products (2)
ibm/tivoli_storage_flashcopy_manager
3.1.0.0 - 3.1.1.3
ibm/tivoli_storage_manager_for_virtual_environments
6.3.0.0 - 6.3.2.5
Published
Oct 04, 2015
Tracked Since
Feb 18, 2026