CVE-2014-6152: XSS
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Integrated Portal (TIP) 2.2.x allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6152?
CVE-2014-6152 has been classified with a medium severity due to the potential for cross-site scripting attacks.
How do I fix CVE-2014-6152?
To fix CVE-2014-6152, you should update IBM Tivoli Integrated Portal to the latest version that resolves these vulnerabilities.
Who is affected by CVE-2014-6152?
CVE-2014-6152 affects remote authenticated users of IBM Tivoli Integrated Portal versions 2.1 and 2.2.
What types of attacks can CVE-2014-6152 be exploited for?
CVE-2014-6152 can be exploited for cross-site scripting attacks, potentially allowing attackers to inject arbitrary web scripts or HTML.
Is user authentication required for CVE-2014-6152 exploitation?
Yes, exploitation of CVE-2014-6152 requires that the attacker is an authenticated user on the affected system.