Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-36056

IBM System Storage Virtualization Engine TS7700 cross-site scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM System Storage Virtualization Engine TS7700

Default version status: unaffected

  • 8.60.0.115affected

IBM System Storage Virtualization Engine TS7700

Default version status: unaffected

  • 8.54.2.17, 8.60.0.115affected

IBM System Storage Virtualization Engine TS7700

Default version status: unaffected

  • 8.54.2.17, 8.60.0.115affected

References