CVE-2017-1203

IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123678.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22005246Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22006014Vendor Advisory
• http://www.securityfocus.com/bid/99916Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/123678VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22005246Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22006014Vendor Advisory
• http://www.securityfocus.com/bid/99916Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/123678VDB Entry, Vendor Advisory

Published

Jul 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1197IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequat…
• CVE-2017-1198IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM…3.7
• CVE-2017-1199IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.…
• CVE-2017-1200IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM…3.7
• CVE-2017-1201IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) …
• CVE-2017-1202IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM…5.4
• CVE-2017-1204IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains…
• CVE-2017-1205IBM Platform LSF 10.1 contains an unspecified vulnerability …
• CVE-2017-12061An XSS issue was discovered in admin/install.php in MantisBT…6.1
• CVE-2017-12062An XSS issue was discovered in manage_user_page.php in Manti…
• CVE-2017-12064The csv_log_html function in library/edihistory/edih_csv_inc…
• CVE-2017-12065spikekill.php in Cacti before 1.1.16 might allow remote atta…