CVE-2016-5944

MEDIUM

IBM Spectrum Control <5.2.11 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string.

References (3)

Scores

CVSS v3 5.4
EPSS 0.0020
EPSS Percentile 41.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Classification

CWE
CWE-79
Status published

Affected Products (17)

ibm/spectrum_control
ibm/spectrum_control
ibm/spectrum_control
ibm/spectrum_control
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
ibm/tivoli_storage_productivity_center
... and 2 more

Timeline

Published Sep 26, 2016
Tracked Since Feb 18, 2026