CVE-2014-8916 in OpenPages GRC Platforminfo

Summary

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0144.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

11/14/2014

Disclosure

10/03/2015

CPE

ready

CVSS

3.5

EPSS

0.00166

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!