CVE-2014-0889

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/91241

http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889

http://www-01.ibm.com/support/entdocview.wss?uid=swg21679081

http://secunia.com/advisories/59681

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS