Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-0889

MEDIUM · 4.3 CVSS Gepubliceerd: CWE-79

Beschrijving NL

Meerdere cross-site scripting (XSS) kwetsbaarheden in IBM Atlas Suite (ook bekend als Atlas Policy Suite), zoals gebruikt in Atlas eDiscovery Process Management via 6.0.3, Disposal and Governance Management for IT via 6.0.3, en Global Retention Policy and Schedule Management via 6.0.3, stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde parameters.

Origineel (Engels) tonen

Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Vendors

Ibm

Affected products

Atlas Ediscovery Process Management Atlas Suite Disposal And Governance Management For It Global Retention Policy And Schedule Management

References