CVE-2012-5939 Information

Description

Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Reference

http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391 http://www-01.ibm.com/support/docview.wss?uid=swg21625935 https://exchange.xforce.ibmcloud.com/vulnerabilities/80494