CVE-2010-2433

CVE-2010-2433 concerns multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere ILOG JRules 6.7, specifically in content/internalError.jsp. The flaws allow remote attackers to inject arbitrary web script or HTML via an RTS URL to one of three pages (explore/explore.jsp, compose/compos...

CVE-2014-6114

The CVE-2014-6114 issue affects IBM WebSphere ENTERPRISE products in the IBM ODM/Rules stack: Hosted Transparent Decision Service in Rule Execution Server, impacting WebSphere ILOG JRules 7.1 (before MP1 FP5 IF43); WebSphere ODM 7.5 (before FP3 IF41); ODM 8.0 (before MP1 FP2 IF34); ODM 8.5 (befor...