CVE-2014-8916

Cross-site scripting XSS vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0144...

CVE-2014-8916

CVE-2014-8916 affects IBM OpenPages GRC Platform 6.2–7.1. The vulnerability is a cross-site scripting (XSS) issue caused by improper validation of user-supplied input, exploitable by remote authenticated users through a crafted URL to run script in a victim’s browser. Affected versions include 6....