CVE-2014-6100 Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF003...
LowCVSS 3.5
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security directory server | = 6.3.1 | No fix listed |
| ibm security directory server | = 6.3.1.1 | No fix listed |
| ibm security directory server | = 6.3.1.2 | No fix listed |
| ibm security directory server | = 6.3.1.3 | No fix listed |
| ibm security directory server | = 6.3.1.4 | No fix listed |
| ibm security directory server | = 6.3.1.5 | No fix listed |
| ibm security directory server | = 6.3.1.6 | No fix listed |
| ibm tivoli directory server | = 6.1.0 | No fix listed |
| ibm tivoli directory server | = 6.1.0.0 | No fix listed |
| ibm tivoli directory server | = 6.1.0.1 | No fix listed |
| ibm tivoli directory server | = 6.1.0.2 | No fix listed |
| ibm tivoli directory server | = 6.1.0.3 | No fix listed |
| ibm tivoli directory server | = 6.1.0.4 | No fix listed |
| ibm tivoli directory server | = 6.1.0.5 | No fix listed |
| ibm tivoli directory server | = 6.1.0.6 | No fix listed |
| ibm tivoli directory server | = 6.1.0.7 | No fix listed |
| ibm tivoli directory server | = 6.1.0.8 | No fix listed |
| ibm tivoli directory server | = 6.1.0.9 | No fix listed |
| ibm tivoli directory server | = 6.1.0.10 | No fix listed |
| ibm tivoli directory server | = 6.1.0.11 | No fix listed |
| ibm tivoli directory server | = 6.1.0.12 | No fix listed |
| ibm tivoli directory server | = 6.1.0.13 | No fix listed |
| ibm tivoli directory server | = 6.1.0.14 | No fix listed |
| ibm tivoli directory server | = 6.1.0.15 | No fix listed |
| ibm tivoli directory server | = 6.1.0.17 | No fix listed |
Show 57 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli directory server | = 6.1.0.18 | No fix listed |
| ibm tivoli directory server | = 6.1.0.19 | No fix listed |
| ibm tivoli directory server | = 6.1.0.20 | No fix listed |
| ibm tivoli directory server | = 6.1.0.21 | No fix listed |
| ibm tivoli directory server | = 6.1.0.22 | No fix listed |
| ibm tivoli directory server | = 6.1.0.23 | No fix listed |
| ibm tivoli directory server | = 6.1.0.24 | No fix listed |
| ibm tivoli directory server | = 6.1.0.25 | No fix listed |
| ibm tivoli directory server | = 6.1.0.26 | No fix listed |
| ibm tivoli directory server | = 6.1.0.27 | No fix listed |
| ibm tivoli directory server | = 6.1.0.28 | No fix listed |
| ibm tivoli directory server | = 6.1.0.29 | No fix listed |
| ibm tivoli directory server | = 6.1.0.30 | No fix listed |
| ibm tivoli directory server | = 6.1.0.31 | No fix listed |
| ibm tivoli directory server | = 6.1.0.32 | No fix listed |
| ibm tivoli directory server | = 6.1.0.33 | No fix listed |
| ibm tivoli directory server | = 6.1.0.34 | No fix listed |
| ibm tivoli directory server | = 6.1.0.35 | No fix listed |
| ibm tivoli directory server | = 6.1.0.36 | No fix listed |
| ibm tivoli directory server | = 6.1.0.37 | No fix listed |
| ibm tivoli directory server | = 6.1.0.38 | No fix listed |
| ibm tivoli directory server | = 6.1.0.39 | No fix listed |
| ibm tivoli directory server | = 6.1.0.45 | No fix listed |
| ibm tivoli directory server | = 6.1.0.46 | No fix listed |
| ibm tivoli directory server | = 6.1.0.47 | No fix listed |
| ibm tivoli directory server | = 6.1.0.48 | No fix listed |
| ibm tivoli directory server | = 6.1.0.63 | No fix listed |
| ibm tivoli directory server | = 6.2 | No fix listed |
| ibm tivoli directory server | = 6.2.0 | No fix listed |
| ibm tivoli directory server | = 6.2.0.0 | No fix listed |
| ibm tivoli directory server | = 6.2.0.1 | No fix listed |
| ibm tivoli directory server | = 6.2.0.2 | No fix listed |
| ibm tivoli directory server | = 6.2.0.3 | No fix listed |
| ibm tivoli directory server | = 6.2.0.4 | No fix listed |
| ibm tivoli directory server | = 6.2.0.5 | No fix listed |
| ibm tivoli directory server | = 6.2.0.6 | No fix listed |
| ibm tivoli directory server | = 6.2.0.7 | No fix listed |
| ibm tivoli directory server | = 6.2.0.8 | No fix listed |
| ibm tivoli directory server | = 6.2.0.10 | No fix listed |
| ibm tivoli directory server | = 6.2.0.11 | No fix listed |
| ibm tivoli directory server | = 6.2.0.12 | No fix listed |
| ibm tivoli directory server | = 6.2.0.13 | No fix listed |
| ibm tivoli directory server | = 6.2.0.14 | No fix listed |
| ibm tivoli directory server | = 6.2.0.15 | No fix listed |
| ibm tivoli directory server | = 6.2.0.19 | No fix listed |
| ibm tivoli directory server | = 6.2.0.20 | No fix listed |
| ibm tivoli directory server | = 6.2.0.21 | No fix listed |
| ibm tivoli directory server | = 6.2.0.22 | No fix listed |
| ibm tivoli directory server | = 6.2.0.38 | No fix listed |
| ibm tivoli directory server | = 6.3.0 | No fix listed |
| ibm tivoli directory server | = 6.3.0.0 | No fix listed |
| ibm tivoli directory server | = 6.3.0.1 | No fix listed |
| ibm tivoli directory server | = 6.3.0.2 | No fix listed |
| ibm tivoli directory server | = 6.3.0.8 | No fix listed |
| ibm tivoli directory server | = 6.3.0.9 | No fix listed |
| ibm tivoli directory server | = 6.3.0.10 | No fix listed |
| ibm tivoli directory server | = 6.3.0.32 | No fix listed |
References
- 61061 third-party-advisory
- www-01.ibm.com vendor-advisory
- ibm-sds-cve20146100-xss(96005) vdb-entry