low3.5
CVE-2014-3033
Cross-site scripting (XSS) vulnerability in IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.…
Impact
Cross-site scripting (XSS) vulnerability in IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Emptoris Sourcing Portfolio | Versions 9.5.0.0, 9.5.0.1, 9.5.0.2, 9.5.1.0, 9.5.1.1, 9.5.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/60481
- http://www-01.ibm.com/support/docview.wss?uid=swg21680665
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93192
- http://secunia.com/advisories/60481
- http://www-01.ibm.com/support/docview.wss?uid=swg21680665
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93192