CVE-2018-15494

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid...

CVE-2018-15494

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid...

CVE-2018-15494

CVE-2018-15494: Dojo Toolkit’s DataGrid in Dojo before 1.14 is vulnerable to unescaped string injection, enabling cross‑site scripting. Affected component is dojox/Grid/DataGrid; impact is client-side script execution in the context of the hosting page. The public fix is to upgrade to Dojo 1.14 o...

CVE-2018-15494: Improper Encoding or Escaping of Output

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid...

Security Bulletin: IBM Dojo Toolkit XSS vulnerability affecting Rational Business Developer v8.0

Summary IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. Rational Business Developer includes the affected files in 8.0.x releases, but does not use them. This security bulletin intends to provide information on this vulnerability and...

PT-2018-3673 · Dojo +2 · Dojo Toolkit +2

Name of the Vulnerable Software and Affected Versions: Dojo Toolkit versions prior to 1.14 Description: The issue is related to unescaped string injection in dojox/Grid/DataGrid, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected...

Security Bulletin: Vulnerabilities in Dojo Toolkit affect IBM Worklight and IBM MobileFirst Platform Foundation (CVE-2014-8917)

Summary There are cross-site scripting vulnerabilities in the Dojo Toolkit that is used by IBM Worklight and IBM MobileFirst Platform Foundation. Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of...

Security Bulletin: Security vulnerabilities have been identified in multiple components shipped with IBM Intelligent Operations Center (May 2015)

Summary Multiple components are shipped with IBM Intelligent Operations Center. Information about security vulnerabilities that affect some components has been published in security bulletins. Vulnerability Details Consult the following security bulletins for vulnerability details: Vulnerability ...

Security Bulletin: Cross-site scripting vulnerability in IBM MessageSight (CVE-2014-8917)

Summary The Dojo Toolkit components used by IBM MessageSight are subject to cross-site scripting vulnerability. Vulnerability Details CVE ID: CVE-2014-8917 The IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could...

Security Bulletin: Multiple vulnerability in Product IBM Tivoli Common Reporting( CVE-2015-0138, CVE-2014-9495,CVE-2014-8917,CVE-2015-0973 ,CVE-2014-3566 ,CVE-2014-6457 ,CVE-2014-6593,CVE-2015-0410,CVE-2014-3569,CVE-2015-0204,CVE-2014-3570)

Summary Fixes of Cognos Business Intelligence is provided as part of Tivoli Common Reporting fixes. There are multiple vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 6 and IBM® Runtime Environment Java™ Technology Edition, Version 7 that are used by IBM Cognos Busines...

Security Bulletin: Multiple cross-site scripting (XSS) vulnerabilities in IBM Dojo Toolkit affects IBM Case Manager (CVE-2014-8917)

Summary There are multiple cross-site scripting XSS vulnerabilities in 1 uploader.swf, 2 fileuploader.swf, 3 audio.swf, and 4 video.swf in the IBM Dojo Toolkit. Vulnerability Details CVE-ID: CVE-2014-8917 Description: There are multiple cross-site scripting XSS vulnerabilities in the following IB...

Security Bulletin: Financial Transaction Manager for Corporate Payment Services Access Control: Information Disclosure - Dojo Readme's (CVE-2016-0232)

Summary IBM Financial Transaction Manager for Corporate Payment Services for Multi-Platform could allow an authenticated attacker to obtain sensitive information from README files that could aid in further attacks against the system. Vulnerability Details CVEID: CVE-2016-0232 DESCRIPTION: IBM...

Security Bulletin: IBM Forms Experience Builder is affected by a Dojo Toolkit vulnerability (CVE-2014-8917)

Summary IBM Forms Experience Builder uses the Dojo Toolkit which has a known cross-site scripting XSS vulnerability. Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote...

Security Bulletin: IBM Financial Transaction Manager affected by IBM Dojo Toolkit is vulnerable to cross-site scripting (CVE-2014-8917)

Summary IBM Dojo Toolkit is vulnerable to cross-site scripting affecting Financial Transaction Manager for Check Services. Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote...

Security Bulletin: Multiple IBM InfoSphere Information Server components are affected by a vulnerability in IBM Dojo Toolkit (CVE-2014-8917)

Summary Multiple components of IBM InfoSphere Information Server may be affected by an XSS vulnerability in IBM Dojo Toolkit. Vulnerability Details CVE-ID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

Security Bulletin: IBM® InfoSphere® Master Data Management Collaborative Edition is affected by a vulnerability in the IBM Dojo Toolkit (CVE-2014-8917)

Summary Web applications in IBM InfoSphere Master Data Management Collaborative Edition might be subject to cross site scripting vulnerability using file uploader services from the IBM Dojo Toolkit . Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: The IBM Dojo Toolkit is vulnerable to cro...

Security Bulletin: A vulnerability in the IBM Dojo Toolkit affects IBM Cognos Business Intelligence. (CVE-2014-8917)

Summary An IBM Dojo toolkit vulnerability was disclosed on Dec 8, 2014. The IBM Dojo toolkit is included with IBM Cognos Business Intelligence. IBM Cognos Business Intelligence has addressed the vulnerability. Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable ...

Security Bulletin: Vulnerability in Open Source Dojo ToolKit affects IBM Social Media Analytics (CVE- 2015-5654)

Summary A Dojo ToolKit vulnerability affecting versions of Dojo prior to 1.2 was addressed by IBM Social Media Analytics. An upgrade to Dojo 1.8 was performed. Vulnerability Details CVEID: CVE-2015-5654 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation...

Security Bulletin: Vulnerability in Dojo Toolkit affects IBM MQ Light (CVE-2015-5654)

Summary Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability in a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site, once the...

Security Bulletin: Vulnerabilities in IBM Dojo Toolkit affect IBM Image Construction and Composition Tool (CVE-2014-8917)

Summary IBM Dojo Toolkit is vulnerable to cross-site scripting and affects IBM Image Construction and Composition Tool. Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. CVSS Base...