Security Bulletin: IBM Integration Bus Manufacturing pack is affected by Cross-site scripting

Summary

IBM Integration Bus Manufacturing pack is vulnerable to cross-site scripting (XSS)

Vulnerability Details

**CVE-ID:*CVE-2014-4820
CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/95457 for the current score
CVSS Environmental Score: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N)

The IBM Integration Bus Manufacturing pack is vulnerable to cross-site scripting (XSS)

Affected Products and Versions

IBM Integration Bus Manufacturing Pack 1.0.0.0

Remediation/Fixes

Product

| VRMF|APAR|Remediation/Fix
—|—|—|—
IBM Integration Bus Manufacturing Pack| V1.0| IT03567| The APAR is targeted to be available in fix pack 1.0.0.1. Prior to fix pack availability the APAR can be obtained on request from IBM Support

Workarounds and Mitigations

None known