Lucene search

[email protected]CVE-2014-4751

HistoryAug 12, 2014 - 5:01 a.m.

CVE-2014-4751

2014-08-1205:01:03

CWE-79

[email protected]

web.nvd.nist.gov

ibm

security

access manager

xss

vulnerability

cve-2014-4751

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

NVD

Node

ibmsecurity_access_manager_for_mobileMatch8.0.0.0

ibmsecurity_access_manager_for_mobileMatch8.0.0.1

ibmsecurity_access_manager_for_mobileMatch8.0.0.3

CPENameOperatorVersion
ibm:security_access_manager_for_mobileibm security access manager for mobileeq8.0.0.0
ibm:security_access_manager_for_mobileibm security access manager for mobileeq8.0.0.1
ibm:security_access_manager_for_mobileibm security access manager for mobileeq8.0.0.3

CPE	Name	Operator	Version
ibm:security_access_manager_for_mobile	ibm security access manager for mobile	eq	8.0.0.0
ibm:security_access_manager_for_mobile	ibm security access manager for mobile	eq	8.0.0.1
ibm:security_access_manager_for_mobile	ibm security access manager for mobile	eq	8.0.0.3

References

secunia.com/advisories/60562

www-01.ibm.com/support/docview.wss?uid=swg21680440

exchange.xforce.ibmcloud.com/vulnerabilities/94353

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Related for CVE-2014-4751

prion1 nvd1 cvelist1