CVE-2019-4137: IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting.

Security readout for executives and security teams

CVE-2019-4137 is a cross-site scripting flaw in IBM Tivoli Storage Productivity Center / Spectrum Control Standard Edition. If a user interacts with malicious content in the Web UI, attacker-controlled JavaScript could run inside a trusted session and potentially expose credentials. It is medium severity, but important where storage administration interfaces are reachable. Exposure is most likely in environments running the listed IBM Spectrum Control Standard Edition or Tivoli Storage Productivity Center versions with the Web UI available to administrators or other users. Internet-facing or broadly reachable management interfaces increase business risk, but the sources do not state default exposure. Prioritize remediation for exposed or business-critical storage management systems. Treat this as moderate urgency overall, higher where administrators use the Web UI from shared networks or where stolen credentials could affect storage operations. Mitigation focus: Confirm affected IBM product and version against the official IBM advisory.; Apply IBM-recommended fixes or workarounds from vendor guidance.; Restrict Web UI access to trusted administrative networks and users..

Prepared

May 25, 2026, 04:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.