Critical Alert 1 Active Exploit Detected Today

CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability →
Powered by CVE Watchtower
×
July 30, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-11707NVD

Vulnerability Summary

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.
Severity Level
CRITICAL(9.3)
Published Date
Jul 30, 2026
Last Modified
Jul 30, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-79: Cross-site Scripting (XSS) ↗
The software does not neutralize user-controllable input before it is placed in output that is used as a web page.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone

External References