CVE-2014-8893

CVE-2014-8893 has concrete details in IBM TRIRIGA Application Platform: XSS in mainpage.jsp and GetImageServlet.img affecting versions 3.2.1.x, 3.3.2.x (≤3.3.2.2) and 3.4.1.x (≤3.4.1.1). Root cause is improper input validation allowing remote authenticated users to inject script via crafted URLs,...

CVE-2014-8893: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 mainpage.jsp and 2 GetImageServlet.img in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL...