NVD

Id
31306  
Name
CVE-2014-3034  
Description
Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-08-26  
Modified Date
2017-01-06  
Seq
2014-3034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163966 31306 CVE-2014-3034 60479  View
163967 31306 CVE-2014-3034 http://www-01.ibm.com/support/docview.wss?uid=swg21680370  View
163968 31306 CVE-2014-3034 ibm-emportis-cve20143034-xss(93193)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15085 JVNDB-2014-003960 IBM Emptoris Contract Management におけるクロスサイトスクリプティングの脆弱性 IBM Emptoris Contract Management には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3034 70321 CVE-2014-3034 31306 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003960.html 2014-08-12 2014-08-28 View