PT-2015-5487 · Ibm · Content Manager Ondemand+4

Publicado 2015-10-03 · Atualizado 2015-10-05 · CVE-2015-1888

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Content Navigator versions 2.0.2 before 2.0.2-ICN-FP007 IBM Content Navigator versions 2.0.3 before 2.0.3-ICN-FP003

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This affects various products, including Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and others.

Recommendations For IBM Content Navigator version 2.0.2, update to 2.0.2-ICN-FP007 or later. For IBM Content Navigator version 2.0.3, update to 2.0.3-ICN-FP003 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-1888

Produtos afetados

Ibm Content Foundation

Content Manager

Content Manager Ondemand

Filenet Content Manager

Ibm Content Navigator

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-1888 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21700205 · Aviso do Fabricante