Lucene search

PRIOn knowledge basePRION:CVE-2014-3035

HistoryAug 26, 2014 - 2:55 p.m.

Cross site scripting

2014-08-2614:55:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

35.0%

JSON

Cross-site scripting (XSS) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CPENameOperatorVersion
emptoris_spend_analysiseq9.5.0.2
emptoris_spend_analysiseq10.0.1.1
emptoris_spend_analysiseq10.0.1.0
emptoris_spend_analysiseq9.5.0.1
emptoris_spend_analysiseq10.0.2.2
emptoris_spend_analysiseq9.5.0.0
emptoris_spend_analysiseq10.0.2.0
emptoris_spend_analysiseq10.0.1.2
emptoris_spend_analysiseq9.5.0.3

Name	Operator	Version
emptoris_spend_analysis	eq	9.5.0.2
emptoris_spend_analysis	eq	10.0.1.1
emptoris_spend_analysis	eq	10.0.1.0
emptoris_spend_analysis	eq	9.5.0.1
emptoris_spend_analysis	eq	10.0.2.2
emptoris_spend_analysis	eq	9.5.0.0
emptoris_spend_analysis	eq	10.0.2.0
emptoris_spend_analysis	eq	10.0.1.2
emptoris_spend_analysis	eq	9.5.0.3

References

secunia.com/advisories/60480

www-01.ibm.com/support/docview.wss?uid=swg21681277

exchange.xforce.ibmcloud.com/vulnerabilities/93194

5.4 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

35.0%

JSON

Related for PRION:CVE-2014-3035