Vulnerability Bulletins |
IBM Security Bulletin: IBM Security Access Manager for Web is affected by an XSS vulnerability |
|
| Affected software | IBM |
|
The dojox/form/resources/*.swf and dojox/av/resources/*.swf files exhibit an XSS vulnerability. IBM Security Access Manager uses IBM Dojo Toolkit and is affected by this vulnerability. CVE(s): CVE-2014-8917 Affected product(s) and affected version(s): IBM Security Access Manager for Web 8.0, firmware versions 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5, and 8.0.1.0. Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_security_access_manager_for_web_is_affected_by_an_xss_vulnerability?lang=en_us |
|