NVD

Id
29729  
Name
CVE-2014-0889  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-07-29  
Modified Date
2017-01-06  
Seq
2014-0889  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157104 29729 CVE-2014-0889 59681  View
157105 29729 CVE-2014-0889 http://www-01.ibm.com/support/entdocview.wss?uid=swg21679081  View
157106 29729 CVE-2014-0889 http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889  View
157107 29729 CVE-2014-0889 ibm-atlas-cve20140889-xss(91241)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14763 JVNDB-2014-003638 複数の IBM 製品で使用される IBM Atlas Suite におけるクロスサイトスクリプティングの脆弱性 Atlas eDiscovery Process Management、Disposal and Governance Management for IT、および Global Retention Policy and Schedule Management で使用される IBM Atlas Suite (別名 Atlas Policy Suite) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-0889 68290 CVE-2014-0889 29729 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003638.html 2014-07-25 2014-08-01 View