CVE-2014-0855: XSS
Published Feb 14, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
10 affected components
IBM Connections Portlets=4.0
IBM Connections Portlets=4.5
IBM Connections Portlets=4.5.1
IBM WebSphere Portal=7.0.0.2
IBM WebSphere Portal=8.0.0.1
All of the following
Any of the following
IBM Connections Portlets=4.0
IBM Connections Portlets=4.5
IBM Connections Portlets=4.5.1
Any of the following
IBM WebSphere Portal=7.0.0.2
IBM WebSphere Portal=8.0.0.1
Event History
Feb 14, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·01:10 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0855?
CVE-2014-0855 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-0855?
To fix CVE-2014-0855, upgrade IBM Connections Portlets to version 4.5.1 FP1 or later.
3
What systems are affected by CVE-2014-0855?
CVE-2014-0855 affects IBM Connections Portlets versions 4.0, 4.5, and 4.5.1 prior to FP1.
4
What type of vulnerability is CVE-2014-0855?
CVE-2014-0855 is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary web scripts.
5
Are IBM WebSphere Portal versions 7.0.0.2 and 8.0.0.1 vulnerable to CVE-2014-0855?
No, IBM WebSphere Portal versions 7.0.0.2 and 8.0.0.1 are not affected by CVE-2014-0855.