Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in IBM Dojo Toolkit affects IBM eDiscovery Analyzer |
|
| Affected software | IBM |
|
The dojox/form/resources/fileuploader.swf, dojox/form/resources/uploader.swf, dojox/av/resources/audio.swf and dojox/av/resources/video.swf files exhibit an XSS vulnerability. Any IBM Web application using IBM Dojo Toolkit and providing those files might be subject to XSS. CVE(s): CVE-2014-8917 Affected product(s) and affected version(s): IBM eDiscovery Analyzer Version 2.1 IBM InfoSphere eDiscovery Analyzer Version 2.1.1 IBM eDiscovery Analyzer Version 2.2 IBM eDiscovery Analyzer More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_ibm_dojo_toolkit_affects_ibm_ediscovery_analyzer?lang=en_us |
|