XSS in Ibm Content_navigator

CVE-2015-1888

Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other p…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (37.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Content_navigator — versions 2.0.2, 2.0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)