EUVD-2010-2442

Malware in sbrugna...

CVE-2014-6114

The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere Operational Decision Management 7.5 before FP3 IF41; and Operational Decision Manager 8.0 before MP1 FP2 IF34, 8.5 before MP1 FP1 IF43, and 8.6 before IF8 allows...

PT-2014-7050

Name of the Vulnerable Software and Affected Versions IBM WebSphere ILOG JRules version 7.1 before MP1 FP5 IF43 WebSphere Operational Decision Management versions 7.5 before FP3 IF41 Operational Decision Manager versions 8.0 before MP1 FP2 IF34 Operational Decision Manager versions 8.5 before MP1...

CVE-2014-6114: Exposure of Sensitive Information to an Unauthorized Actor

The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere Operational Decision Management 7.5 before FP3 IF41; and Operational Decision Manager 8.0 before MP1 FP2 IF34, 8.5 before MP1 FP1 IF43, and 8.6 before IF8 allows...

CVE-2011-1371: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...

PT-2011-3090

Name of the Vulnerable Software and Affected Versions IBM WebSphere ILOG Rule Team Server version 7.1.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This occurs via vectors that trigger an Unknown Error document...

CVE-2011-4171: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp...

PT-2011-4877

Name of the Vulnerable Software and Affected Versions IBM WebSphere ILOG Rule Team Server version 7.1.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the project parameter to the "teamserver/faces/home.jsp" endpoint...

CVE-2010-2433: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to inject arbitrary web script or HTML via an RTS URL to 1 explore/explore.jsp, 2 compose/compose.jsp, or 3 home.jsp in faces/...

IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting

IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/41030/info IBM WebSphere ILOG JRules is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/41030/info IBM WebSphere ILOG JRules is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...