CVE-2014-3035

2014-08-2614:00:00

ibm

www.cve.org

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

36.6%

JSON

Cross-site scripting (XSS) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

References

secunia.com/advisories/60480

www-01.ibm.com/support/docview.wss?uid=swg21681277

exchange.xforce.ibmcloud.com/vulnerabilities/93194