CVE

Id
73495  
CVE No.
CVE-2014-6196  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework (WDF) and Lotus Widget Factory (LWF), allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere Portal configuration, leading to improper construction of a response page by an application.  
Phase
Assigned (20140902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
688544 73495 CVE-2014-6196 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21690018  View
688545 73495 CVE-2014-6196 AIXAPAR:LO82672  View
688546 73495 CVE-2014-6196 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1LO82672  View
688547 73495 CVE-2014-6196 AIXAPAR:LO82673  View
688548 73495 CVE-2014-6196 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1LO82673  View
688549 73495 CVE-2014-6196 AIXAPAR:LO82674  View
688550 73495 CVE-2014-6196 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1LO82674  View
688551 73495 CVE-2014-6196 AIXAPAR:LO82675  View
688552 73495 CVE-2014-6196 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1LO82675  View
688553 73495 CVE-2014-6196 AIXAPAR:LO82676  View
688554 73495 CVE-2014-6196 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1LO82676  View
688555 73495 CVE-2014-6196 SECUNIA:59546  View
688556 73495 CVE-2014-6196 URL:http://secunia.com/advisories/59546  View
688557 73495 CVE-2014-6196 XF:ibm-wef-cve20146196-xss(98608)  View

Related JVN