CVE-2015-0144

Cross-site scripting XSS vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8916...

CVE-2015-0144

IBM OpenPages GRC Platform is affected by CVE-2015-0144 (XSS) across versions 6.2 (before IF7) through 7.1 (before FP1). The issue arises from improper validation of user-supplied input, allowing a remote authenticated user to inject and execute web scripts via a crafted URL, potentially stealing...