PT-2014-3896 · Ibm · Ibm Websphere Portal+1

Publicado 2014-02-14 · Atualizado 2017-08-29 · CVE-2014-0855

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Connections Portlets versions prior to 4.5.1 FP1 IBM WebSphere Portal versions 7.0.0.2 and 8.0.0.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting (XSS) vulnerabilities.

Recommendations For IBM Connections Portlets versions prior to 4.5.1 FP1, update to version 4.5.1 FP1 or later. For IBM WebSphere Portal versions 7.0.0.2 and 8.0.0.1, consider restricting access to sensitive areas of the portal until an update or patch is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-0855

Produtos afetados

Ibm Connections Portlets

Ibm Websphere Portal

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-0855 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90802 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0855 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21663921 · Aviso do Fabricante