PT-2015-4122 · Ibm · Ibm Openpages Grc Platform
Published
2015-10-03
·
Updated
2015-10-05
·
CVE-2014-8916
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM OpenPages GRC Platform versions 6.2 through 6.2 before IF7
IBM OpenPages GRC Platform versions 6.2.1 through 6.2.1 before 6.2.1.1 IF5
IBM OpenPages GRC Platform versions 7.0 through 7.0 before FP4
IBM OpenPages GRC Platform versions 7.1 through 7.1 before FP1
Description
The issue is a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Recommendations
For IBM OpenPages GRC Platform version 6.2, apply IF7 to resolve the issue.
For IBM OpenPages GRC Platform version 6.2.1, apply 6.2.1.1 IF5 to resolve the issue.
For IBM OpenPages GRC Platform version 7.0, apply FP4 to resolve the issue.
For IBM OpenPages GRC Platform version 7.1, apply FP1 to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Openpages Grc Platform