Lucene search

IbmCVE-2014-0874

HistoryFeb 28, 2014 - 6:18 a.m.

CVE-2014-0874

2014-02-2806:18:54

CWE-79

ibm

web.nvd.nist.gov

cve-2014-0874

cross-site scripting

xss

ibm content navigator

security vulnerability

remote authenticated users

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter.

Affected configurations

Nvd

Node

ibmcontent_navigatorMatch2.0.0

ibmcontent_navigatorMatch2.0.1

ibmcontent_navigatorMatch2.0.2

VendorProductVersionCPE
ibmcontent_navigator2.0.0cpe:2.3:a:ibm:content_navigator:2.0.0:*:*:*:*:*:*:*
ibmcontent_navigator2.0.1cpe:2.3:a:ibm:content_navigator:2.0.1:*:*:*:*:*:*:*
ibmcontent_navigator2.0.2cpe:2.3:a:ibm:content_navigator:2.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	content_navigator	2.0.0	cpe:2.3:a:ibm:content_navigator:2.0.0:::::::*
ibm	content_navigator	2.0.1	cpe:2.3:a:ibm:content_navigator:2.0.1:::::::*
ibm	content_navigator	2.0.2	cpe:2.3:a:ibm:content_navigator:2.0.2:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg21665362

www-01.ibm.com/support/docview.wss?uid=swg21668907

www.securityfocus.com/bid/65852

www.securitytracker.com/id/1030011

exchange.xforce.ibmcloud.com/vulnerabilities/91002

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

Related for CVE-2014-0874