CVE-2014-0889: XSS
First published: Tue Jul 29 2014(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Atlas eDiscovery Process Management | <=6.0.3 | |
| IBM Atlas eDiscovery Process Management | =6.0.1.5 | |
| IBM Atlas eDiscovery Process Management | =6.0.1.6 | |
| IBM Atlas eDiscovery Process Management | =6.0.2 | |
| IBM Atlas Suite | ||
| IBM Disposal and Governance Management for IT | <=6.0.3 | |
| IBM Disposal and Governance Management for IT | =6.0.1.5 | |
| IBM Disposal and Governance Management for IT | =6.0.1.6 | |
| IBM Disposal and Governance Management for IT | =6.0.2 | |
| IBM Global Retention Policy and Schedule Management | <=6.0.3 | |
| IBM Global Retention Policy and Schedule Management | =6.0.1.5 | |
| IBM Global Retention Policy and Schedule Management | =6.0.1.6 | |
| IBM Global Retention Policy and Schedule Management | =6.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/59681
- http://www-01.ibm.com/support/entdocview.wss?uid=swg21679081
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91241
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm atlas ediscovery process management
- version/ibm atlas ediscovery process management/6.0.3
- version/ibm atlas ediscovery process management/6.0.1.5
- version/ibm atlas ediscovery process management/6.0.1.6
- version/ibm atlas ediscovery process management/6.0.2
- canonical/ibm atlas suite
- canonical/ibm disposal and governance management for it
- version/ibm disposal and governance management for it/6.0.3
- version/ibm disposal and governance management for it/6.0.1.5
- version/ibm disposal and governance management for it/6.0.1.6
- version/ibm disposal and governance management for it/6.0.2
- canonical/ibm global retention policy and schedule management
- version/ibm global retention policy and schedule management/6.0.3
- version/ibm global retention policy and schedule management/6.0.1.5
- version/ibm global retention policy and schedule management/6.0.1.6
- version/ibm global retention policy and schedule management/6.0.2