Vulnerability Bulletins |
IBM Security Bulletin: Multiple Vulnerabilities in IBM Connections Mail plug-in (CVE-2014-5191, CVE-2014-8917) |
|
| Affected software | IBM |
|
IBM Connections Mail plug-in for Connections 4.0, 4.5 and 5.0 is vulnerable to a cross-site scripting vulnerability in the IBM Dojo Tookit and another cross-site scripting vulnerability in the CKEditor. Refer to the links below for fix downloads. CVE(s): CVE-2014-8917 and CVE-2014-5191 Affected product(s) and affected version(s): IBM Connections Mail Plug-in (for IBM Connections 5.0) - 1.6 IBM Connections Mail (for IBM Connections 4.5) - 1.3 IBM Connections Mail (for IBM Connections More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_connections_mail_plug_in_cve_2014_5191_cve_2014_8917?lang=en_us |
|