EUVD-2014-0885

Malware in sbrugna...

IBM Connections Portlets for WebSphere Portal Reflected XSS

The version of WebSphere Portal on the remote host is affected by a reflected cross-site scripting vulnerability if the version of Connections Portlets installed is not 4.5.1 FP1 or newer. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72646; scriptversion"1.6";...

CVE-2014-0855

Multiple cross-site scripting XSS vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0855

CVE-2014-0855 affects IBM Connections Portlets for WebSphere Portal (IBM WebSphere Portal 7.0.0.2 and 8.0.0.1) with Portlets 4.x prior to 4.5.1 FP1. The vulnerability is described as a reflected XSS in the Portlets, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors...

CVE-2014-0855

Multiple cross-site scripting XSS vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0855: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...