CVE-2014-3057

Currently unrated

Key Information:

Vendor: IBM
Status: Websphere Portal; Websphere Portal Unified Task List Portlet
Vendor: CVE Published:; 29 July 2014

Summary

Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References

http://secunia.com/advisories/60499

third-party-advisoryx_refsource_SECUNIA

http://www-01.ibm.com/support/docview.wss?uid=swg21677032

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/93531

vdb-entryx_refsource_XF

Timeline

Vulnerability published
Jul 29, 2014
Vulnerability Reserved
Apr 29, 2014