NetSight
IP …
medium4.3

CVE-2014-6079

Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x befor…

Impact

Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected products

VendorProductAffected versions
IbmSecurity Access Manager For Mobile 8.0 Firmware
Versions 8.0.0.0, 8.0.0.1, 8.0.0.3, 8.0.0.4
IbmSecurity Access Manager For Mobile Appliance
Version 8.0
IbmSecurity Access Manager For Web 7.0 Firmware
Versions 7.0.0.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5
IbmSecurity Access Manager For Web Appliance
Versions 7.0, 8.0
IbmSecurity Access Manager For Web 8.0 Firmware
Versions 8.0.0.2, 8.0.0.3, 8.0.0.4

Weakness classification

CWE-79

References