CVE-2014-0956 in IBM WebSphere Portal
摘要 (英语)
Cross-site scripting (XSS) vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
预定
2014-01-06
披露
2014-05-22
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 13340 | IBM WebSphere Portal googlemap.jsp 跨网站脚本 | 79 | 高 | 官方修复 | CVE-2014-0956 |