CVE-2026-11707

CriticalCVSS 9.3

Published: 30/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Summary

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server are affected by a cross-site scripting (XSS) vulnerability in the administrative console login page.

Risk Assessment

An attacker can inject malicious script that executes in the administrator's browser, potentially leading to session theft, account takeover, or other attacks.

Recommendation

Apply patches provided by IBM and consider additional security measures such as input filtering and output encoding.

Original NVD description (English source)

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.