Vulnerability Bulletins |
IBM Security Bulletin: IBM API Management is vulnerable to (CVE-2014-8917) |
|
| Affected software | IBM |
|
The dojox/form/resources/fileuploader.swf, dojox/form/resources/uploader.swf, dojox/av/resources/audio.swf and dojox/av/resources/video.swf files exhibit an XSS vulnerability. IBM API Management uses the IBM Dojo Toolkit and is subject to XSS. CVE(s): CVE-2014-8917 Affected product(s) and affected version(s): IBM API Management V2.0, V3.0 and V4.0 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_api_management_is_vulnerable_to_cve_2014_8917?lang=en_us |
|