CVE-2015-5035

IBM Connections is affected by a cross-site scripting (XSS) vulnerability (CVE-2015-5035) in 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3. The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. The provided connected doc...