CVE-2026-11383

MediumCVSS 5.4

Published: 30/07/2026(UTC)Updated: 18/08/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

An XSS vulnerability in IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server allows an attacker to inject malicious JavaScript in the Administrative Console. This could lead to credential theft or other sensitive information disclosure.

Risk Assessment

The risk includes script execution in the context of an administrator session, potentially leading to console takeover and system compromise.

Recommendation

Apply the patches provided by IBM for the affected software versions.

Other vulnerabilities in IBM Tivoli System Automation Application Manager

CVE-2026-11707Critical
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server are affected by a cross-site scripting (XSS) vulnerability in the administrative console login page.

Original NVD description (English source)

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.