IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7242263 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
History
01 Dec 2025, 18:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.ibm.com/support/pages/node/7242263 - Vendor Advisory | |
| CPE | cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.1-c00:*:*:*:*:*:*:* cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.11.0.2-c00:*:*:*:*:*:*:* cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.11.0.1-c00:*:*:*:*:*:*:* cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.2-b00:*:*:*:*:*:*:* cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.11.0.0-d00:*:*:*:*:*:*:* cpe:2.3:h:ibm:storage_ts4500_library:-:*:*:*:*:*:*:* cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.0-b00:*:*:*:*:*:*:* cpe:2.3:o:ibm:diamondback_tape_library_firmware:2.11.0.4-c00:*:*:*:*:*:*:* cpe:2.3:o:ibm:storage_ts4500_library_firmware:1.10.00-f00:*:*:*:*:*:*:* cpe:2.3:h:ibm:diamondback_tape_library:-:*:*:*:*:*:*:* |
|
| First Time |
Ibm storage Ts4500 Library
Ibm storage Ts4500 Library Firmware Ibm Ibm diamondback Tape Library Firmware Ibm diamondback Tape Library |
Information
Published : 2025-08-15 20:15
Updated : 2025-12-01 18:06
NVD link : CVE-2025-36088
Mitre link : CVE-2025-36088
CVE.ORG link : CVE-2025-36088
JSON object : View
Products Affected
ibm
- storage_ts4500_library_firmware
- diamondback_tape_library_firmware
- diamondback_tape_library
- storage_ts4500_library
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')