IBM Tivoli Endpoint Manager Mobile Device Management is prone to a cross- site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials and execute arbitrary code.

Upgrade to version 9.0.60100

BM Tivoli Endpoint Manager Mobile Device Management (MDM) is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site, after the URL is clicked.

Versions prior to IBM Tivoli Endpoint Manager Mobile Device Management 9.0.60100 are vulnerable.

Check the version

• http://www.securityfocus.com/bid/71424

---

Updated on 2017-03-28