CVE-2014-4751: XSS
Published Aug 12, 2014
·Updated
Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected Software
3 affected components
IBM Security Access Manager for Mobile=8.0.0.0
IBM Security Access Manager for Mobile=8.0.0.1
IBM Security Access Manager for Mobile=8.0.0.3
Remediation
Patch Available
Event History
Aug 12, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4751?
CVE-2014-4751 is considered to be a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2014-4751?
To fix CVE-2014-4751, upgrade IBM Security Access Manager for Mobile to version 8.0.0.4 or later.
3
What versions are affected by CVE-2014-4751?
CVE-2014-4751 affects IBM Security Access Manager for Mobile versions 8.0.0.0, 8.0.0.1, and 8.0.0.3.
4
What type of attack does CVE-2014-4751 enable?
CVE-2014-4751 enables remote attackers to inject arbitrary web scripts or HTML through crafted URLs.
5
Is CVE-2014-4751 a local or remote vulnerability?
CVE-2014-4751 is a remote vulnerability that allows attacks over the network.