CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0CVE-2012-5939
https://notcve.org/view.php?id=CVE-2012-5939
Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en welcome.do en el Data Management Portal Web User Interface en IBM Tivoli Application Dependency Discovery Manager (TADDM) v7.2.x anterior a v7.2.1.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una URL especialmente diseñada. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391 http://www-01.ibm.com/support/docview.wss?uid=swg21625935 https://exchange.xforce.ibmcloud.com/vulnerabilities/80494 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.8EPSS: 0%CPEs: 3EXPL: 0CVE-2012-5770
https://notcve.org/view.php?id=CVE-2012-5770
The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack. La configuración SSL en IBM Tivoli Application Dependency Discovery Manager (TADDM) v7.2.x anterior a v7.2.1.4 soporta el algoritmo de HASH MD5, lo que hace sencillo para atacantes de hombre en medio (man-in-the-middle) falsificar servidores y descifrar tráfico mediante ataques por fuerza-bruta. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391 http://www-01.ibm.com/support/docview.wss?uid=swg21626029 https://exchange.xforce.ibmcloud.com/vulnerabilities/80354 • CWE-16: Configuration •