IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrat…

CVE-2026-11707 describes a cross-site scripting (XSS) vulnerability affecting IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server. The vulnerability exists specifically in the administrative console login page. An attacker exploiting this flaw could inject malicious scripts into the login page, potentially compromising administrator sessions or stealing credentials. IBM has published a support advisory at ibm.com to address this issue. The vulnerability has been assigned a high criticality rating. Users of the affected products are advised to review IBM's support guidance and apply any recommended patches or mitigations promptly.