CVE-2007-4348

no score yetEPSS 1.2%

Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2007-10-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_storage_manager_client

References

http://secunia.com/advisories/27013
http://secunia.com/secunia_research/2007-75/advisory
http://www.securityfocus.com/bid/26221
http://www.securitytracker.com/id?1018868
http://www.vupen.com/english/advisories/2007/3635

Check your stack JSON