XSS in Ibm Atlas Ediscovery Process Management
CVE-2014-0889
Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.012 (63.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Atlas_ediscovery_process_management — versions 6.0.1.5, 6.0.1.6, 6.0.2
- Ibm Atlas_suite
- Ibm Disposal_and_governance_management_for_it — versions 6.0.1.5, 6.0.1.6, 6.0.2
- Ibm Global_retention_policy_and_schedule_management — versions 6.0.1.5, 6.0.1.6, 6.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM)
- psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)