IO14508

IO16016

1026880

http://www-01.ibm.com/support/docview.wss?uid=swg24032290

http://www-01.ibm.com/support/docview.wss?uid=swg24032291

tds-wat-xss(74610)

nThe remote host is running the IBM Tivoli Directory Server Web Admin tool. 

 Versions earlier than 6.1.0.48 (Web Admin Version 4.0027), 6.2.0.22 (Web Admin Version 5.0015) or versions earlier than 6.3.0.11 (Web Admin Version 6.0006) are vulnerable to a cross-site scripting attack. The application fails to sanitize user-supplied input submitted to the Web Admin Tool. Attackers can exploit this issue to execute an arbitrary script in the context of the browser.

According to its version, the IBM Tivoli Directory Server Web Administration Tool installed on the remote host is potentially affected by an unspecified cross-site scripting vulnerability. 

A remote attacker, exploiting this flaw, could potentially execute arbitrary script code in the user's browser in the security context of the affected site.

ID	Name	Product	Family	Severity
6478	IBM Tivoli Directory Server Web Admin tool 6.1.0.x < 6.1.0.48 / 6.2.0.x < 6.2.0.22 / 6.3.0.x < 6.3.0.11 Cross-Site Scripting Vulnerability	Nessus Network Monitor	Web Servers	medium
58816	IBM Tivoli Directory Server Web Administration Tool Unspecified XSS	Nessus	CGI abuses : XSS	medium

CVE-2012-0740

medium

Tenable Plugins

medium

medium