CVE-2014-0832: XSS

Published Feb 1, 2014

Updated

Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value.

Affected Software

3 affected components

IBM Financial Transaction Manager=2.0.0.0

IBM Financial Transaction Manager=2.0.0.1

IBM Financial Transaction Manager=2.0.0.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Financial Transaction Manager (FTM) 2.0 - OAC component to a version that resolves this vulnerability.
Fixed in 2.0.0.3

Event History

Feb 1, 2014

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0832?

CVE-2014-0832 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2014-0832?

To fix CVE-2014-0832, upgrade IBM Financial Transaction Manager to version 2.0.0.3 or later.

Who is affected by CVE-2014-0832?

CVE-2014-0832 affects remote authenticated users of IBM Financial Transaction Manager versions 2.0.0.0 to 2.0.0.2.

What type of vulnerability is CVE-2014-0832?

CVE-2014-0832 is a cross-site scripting (XSS) vulnerability found in the OAC component of IBM Financial Transaction Manager.

What can attackers do with CVE-2014-0832?

Attackers exploiting CVE-2014-0832 can inject arbitrary web scripts or HTML into the application, posing security risks.