CVE-2014-6192

Опубликовано: 25 мая 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21700252
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21700252
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:curam_social_program_management:6.0:sp2:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00166

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-gv6w-82vm-j9r9

github

больше 3 лет назад