EIP-2026-103940

The provided text describes an HTML-injection vulnerability in IBM Tivoli Identity Manager, where user-supplied input is not properly sanitized, allowing attacker-supplied HTML and script code to execute in the context of the affected browser. The example input demonstrates a simple XSS payload.