Lucene search

[email protected]CVE-2014-0889

HistoryJul 29, 2014 - 8:55 p.m.

CVE-2014-0889

2014-07-2920:55:00

CWE-79

[email protected]

web.nvd.nist.gov

ibm

atlas suite

xss

cve-2014-0889

security

vulnerability

web script

html

remote attackers

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

CPENameOperatorVersion
ibm:global_retention_policy_and_schedule_managementibm global retention policy and schedule managementeq6.0.2
ibm:atlas_suiteibm atlas suiteeq-
ibm:disposal_and_governance_management_for_itibm disposal and governance management for iteq6.0.1.6
ibm:global_retention_policy_and_schedule_managementibm global retention policy and schedule managementle6.0.3
ibm:global_retention_policy_and_schedule_managementibm global retention policy and schedule managementeq6.0.1.5
ibm:atlas_ediscovery_process_managementibm atlas ediscovery process managementeq6.0.1.5
ibm:atlas_ediscovery_process_managementibm atlas ediscovery process managementeq6.0.1.6
ibm:atlas_ediscovery_process_managementibm atlas ediscovery process managementle6.0.3
ibm:atlas_ediscovery_process_managementibm atlas ediscovery process managementeq6.0.2
ibm:global_retention_policy_and_schedule_managementibm global retention policy and schedule managementeq6.0.1.6

CPE	Name	Operator	Version
ibm:global_retention_policy_and_schedule_management	ibm global retention policy and schedule management	eq	6.0.2
ibm:atlas_suite	ibm atlas suite	eq	-
ibm:disposal_and_governance_management_for_it	ibm disposal and governance management for it	eq	6.0.1.6
ibm:global_retention_policy_and_schedule_management	ibm global retention policy and schedule management	le	6.0.3
ibm:global_retention_policy_and_schedule_management	ibm global retention policy and schedule management	eq	6.0.1.5
ibm:atlas_ediscovery_process_management	ibm atlas ediscovery process management	eq	6.0.1.5
ibm:atlas_ediscovery_process_management	ibm atlas ediscovery process management	eq	6.0.1.6
ibm:atlas_ediscovery_process_management	ibm atlas ediscovery process management	le	6.0.3
ibm:atlas_ediscovery_process_management	ibm atlas ediscovery process management	eq	6.0.2
ibm:global_retention_policy_and_schedule_management	ibm global retention policy and schedule management	eq	6.0.1.6

Rows per page:

1-10 of 131

References

secunia.com/advisories/59681

www-01.ibm.com/support/entdocview.wss?uid=swg21679081

www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889

exchange.xforce.ibmcloud.com/vulnerabilities/91241

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.4%

JSON

Related for CVE-2014-0889

prion1 cvelist1