EUVD-2014-8744

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Multiple XSS vulnerabilities in IBM Dojo Toolkit allow remote script injection in various SWF files.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2014-8917)	15 Jun 201807:02	–	ibm
IBM Security Bulletins	Security Bulletin: XSS Vulnerabilities in IBM Dojo Toolkit affect WebSphere Service Registry and Repository	15 Jun 201807:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® InfoSphere® Master Data Management Collaborative Edition is affected by a vulnerability in the IBM Dojo Toolkit (CVE-2014-8917)	16 Jun 201813:09	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability exists in the Dojo runtime that affects Rational Software Architect and Rational Software Architect for Websphere Software	10 Sep 202015:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Dojo Toolkit affect IBM Worklight and IBM MobileFirst Platform Foundation (CVE-2014-8917)	17 Jun 201822:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Forms Experience Builder is affected by a Dojo Toolkit vulnerability (CVE-2014-8917)	16 Jun 201819:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager affected by IBM Dojo Toolkit is vulnerable to cross-site scripting (CVE-2014-8917)	16 Jun 201819:42	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Dojo Toolkit affect WebSphere Application Server (CVE-2014-8917)	15 Jun 201807:02	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "4bc15e6b-dff0-3b00-acd0-dffae167d10e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1cb8bec7-dfe1-38cb-a5f9-c3daaacaac20",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
secunia	www.secunia.com/advisories/62590
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/99303
secunia	www.secunia.com/advisories/62837
www-01	www.www-01.ibm.com/support/docview.wss
securitytracker	www.securitytracker.com/id/1032376
www-01	www.www-01.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/72903
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9.2High risk

Vulners AI Score9.2

CVSS 24.3

EPSS0.00449