CVE-2014-6191: XSS
Published Sep 19, 2017
·Updated
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568.
Affected Software
13 affected components
IBM Curam Social Program Management=6.0-sp2
IBM Curam Social Program Management=6.0.4.0
IBM Curam Social Program Management=6.0.4.1
IBM Curam Social Program Management=6.0.4.2
IBM Curam Social Program Management=6.0.4.3
IBM Curam Social Program Management=6.0.4.4
IBM Curam Social Program Management=6.0.4.5
IBM Curam Social Program Management=6.0.5.0
IBM Curam Social Program Management=6.0.5.1
IBM Curam Social Program Management=6.0.5.2
IBM Curam Social Program Management=6.0.5.3
IBM Curam Social Program Management=6.0.5.4
IBM Curam Social Program Management=6.0.5.5
Remediation
Patch Available
Event History
Sep 19, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6191?
CVE-2014-6191 is classified as a medium severity cross-site scripting vulnerability.
2
How do I fix CVE-2014-6191?
To fix CVE-2014-6191, upgrade to a patched version of IBM Curam Social Program Management that addresses this vulnerability.
3
What versions are affected by CVE-2014-6191?
CVE-2014-6191 affects IBM Curam Social Program Management versions 6.0 SP2, 6.0.4, and 6.0.5.
4
What type of vulnerability is CVE-2014-6191?
CVE-2014-6191 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.
5
Can CVE-2014-6191 be exploited remotely?
Yes, CVE-2014-6191 can be exploited remotely by attackers through unspecified vectors.