CVE-2014-4820: XSS
Published Sep 18, 2014
·Updated
Cross-site scripting (XSS) vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
1 affected component
IBM Integration Bus Manufacturing Pack=1.0.0.0
Event History
Sep 18, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4820?
CVE-2014-4820 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-4820?
To fix CVE-2014-4820, upgrade to IBM Integration Bus Manufacturing Pack version 1.0.0.1 or later.
3
What type of vulnerability is CVE-2014-4820?
CVE-2014-4820 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
4
Who is affected by CVE-2014-4820?
CVE-2014-4820 affects users running IBM Integration Bus Manufacturing Pack versions prior to 1.0.0.1.
5
Can CVE-2014-4820 be exploited remotely?
Yes, CVE-2014-4820 can be exploited remotely by attackers to inject malicious scripts into the affected application.