CVE-2015-1978 — MEDIUM (4.3)

Vulnerability Description

Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Ibm	Tivoli Directory Server	6.0

Related Weaknesses (CWE)

CWE-79

References

http://www-01.ibm.com/support/docview.wss?uid=swg21960659PatchVendor Advisory
http://www.securityfocus.com/bid/75435Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032734Third Party AdvisoryVDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21960659PatchVendor Advisory
http://www.securityfocus.com/bid/75435Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032734Third Party AdvisoryVDB Entry

FAQ

What is CVE-2015-1978?

CVE-2015-1978 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iF...

How severe is CVE-2015-1978?

CVE-2015-1978 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1978?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Tivoli Directory Server.