CVE-2014-0855

Currently unrated

Key Information:

Vendor
IBM
Status
Connections Portlets
Vendor
CVE Published:
14 February 2014

Summary

Multiple cross-site scripting (XSS) vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/90802
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg21663921
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.