CVE-2014-0945: XSS
Cross-site scripting (XSS) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0945?
CVE-2014-0945 is classified as a high severity vulnerability due to its potential to allow the injection of arbitrary web script or HTML by authenticated users.
How do I fix CVE-2014-0945?
To mitigate CVE-2014-0945, it is recommended to upgrade IBM Operational Decision Manager to the latest fixed version or apply available patches.
Who is affected by CVE-2014-0945?
CVE-2014-0945 affects users of IBM Operational Decision Manager versions 7.5, 8.0, and 8.5 prior to specific fix packs and interim fixes.
What types of attacks can CVE-2014-0945 facilitate?
CVE-2014-0945 can facilitate cross-site scripting (XSS) attacks, allowing attackers to execute arbitrary scripts in the context of a user's browser.
What are the potential consequences of CVE-2014-0945 exploitation?
Exploitation of CVE-2014-0945 could lead to unauthorized data access, session hijacking, or defacement of web applications.