Security Advisory
CVE-2014-0940
4.3
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.
Published Date
October 7, 2014
Official Source
NIST NVD Advisory