CVE-2010-4120: Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-b...

Security readout for executives and security teams

This CVE describes multiple cross-site scripting issues in the IBM Tivoli Access Manager for e-business TAM console. If a vulnerable console is reachable, an attacker could inject script or HTML that runs in a user's browser. The main business concern is abuse of administrator browser sessions, not direct server takeover from the evidence provided. Exposure appears limited to organizations still running IBM Tivoli Access Manager for e-business 6.1.0 before fix pack FP0006, especially where the TAM console is reachable by users or networks beyond tightly controlled administrators. Prioritize remediation if this console is still in use, reachable outside a restricted admin network, or used by privileged identity administrators. If the product is retired or fully isolated, urgency is lower but should still be documented. Mitigation focus: Confirm whether IBM Tivoli Access Manager for e-business 6.1.0 is deployed.; Upgrade affected 6.1.0 systems to 6.1.0-TIV-TAM-FP0006 or later vendor guidance.; Restrict TAM console access to trusted administrative networks and users..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.