Security Bulletin: Reflected Cross-Site Scripting Vulnerability in IBM Content Navigator (CVE-2014-0874)

Summary Reflected Cross-Site Scripting Vulnerability in IBM Content Navigator Vulnerability Details CVEID: CVE-2014-0874 DESCRIPTION: Arbitrary characters inserted into request parameters are not properly encoded. Not encoding user-supplied input may expose a web application to cross-site...

CVE-2014-0874

CVE-2014-0874 describes a reflected cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x up to but not including 2.0.2.2-ICN-FP002. The issue arises from insufficient encoding of input in request parameters, allowing remote authenticated users to inject arbitrary web script or HT...