3 matches found
CVE-2014-0942: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941...
PT-2014-3960
Name of the Vulnerable Software and Affected Versions IBM Netcool/OMNIbus version 7.4.0 before FP2 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This is due to a vulnerability in the...
CVE-2014-0941: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942...