Security Bulletin: Cross-Site Scripting (XSS) vulnerability have been identified on Tool Prompt Configuration page of Tivoli Netcool/OMNIbus WebGUI (CVE-2020-4196)

Fix is available for vulnerability in Cross-Site Scripting (XSS) affecting Tivoli Netcool/OMNIbus WebGUI Tool Prompt Configuration page (CVE-2020-4196).

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Tivoli Netcool/OMNIbus_GUI	8.1.x

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/5690828

The post Security Bulletin: Cross-Site Scripting (XSS) vulnerability have been identified on Tool Prompt Configuration page of Tivoli Netcool/OMNIbus WebGUI (CVE-2020-4196) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/39jz6eP