Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
2014-10-19T01:55:15.717
2025-04-12T10:46:40.837
Deferred
CVSSv2: 3.5 (LOW)
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.8
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | security_directory_server | 6.3.1 | Yes |
| Application | ibm | security_directory_server | 6.3.1.1 | Yes |
| Application | ibm | security_directory_server | 6.3.1.2 | Yes |
| Application | ibm | security_directory_server | 6.3.1.3 | Yes |
| Application | ibm | security_directory_server | 6.3.1.4 | Yes |
| Application | ibm | security_directory_server | 6.3.1.5 | Yes |
| Application | ibm | security_directory_server | 6.3.1.6 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.0 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.1 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.2 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.3 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.4 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.5 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.6 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.7 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.8 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.9 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.10 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.11 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.12 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.13 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.14 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.15 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.17 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.18 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.19 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.20 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.21 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.22 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.23 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.24 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.25 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.26 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.27 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.28 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.29 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.30 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.31 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.32 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.33 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.34 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.35 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.36 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.37 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.38 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.39 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.45 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.46 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.47 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.48 | Yes |
| Application | ibm | tivoli_directory_server | 6.1.0.63 | Yes |
| Application | ibm | tivoli_directory_server | 6.2 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.0 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.1 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.2 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.3 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.4 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.5 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.6 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.7 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.8 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.10 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.11 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.12 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.13 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.14 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.15 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.19 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.20 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.21 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.22 | Yes |
| Application | ibm | tivoli_directory_server | 6.2.0.38 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0.0 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0.1 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0.2 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0.8 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0.9 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0.10 | Yes |
| Application | ibm | tivoli_directory_server | 6.3.0.32 | Yes |