PT-2010-5556 · Ibm · Ibm Enovia

Publicado 2010-12-22 · Atualizado 2011-01-11 · CVE-2010-4589

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM ENOVIA version 6

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the emxFramework.FilterParameterPattern property.

Recommendations For IBM ENOVIA version 6, update the software to a version that fixes this issue, ensuring that the emxFramework.FilterParameterPattern property is properly sanitized to prevent XSS attacks.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-4589

Produtos afetados

Ibm Enovia

Referências · 6

• http://secunia.com/advisories/42668 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1HE02563 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4589 · Nota de Segurança
• http://vupen.com/english/advisories/2010/3211 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1HE02563 · Nota
• http://securityfocus.com/bid/45391 · Nota