Vulnerability Bulletins |
IBM Security Bulletin: IBM Connections - Persistent Cross-Site Scripting (XSS) Vulnerability in IBM Connections Mail plug-in (CVE-2015-1917) |
|
| Affected software | IBM |
|
IBM Connections Mail plug-in for Connections 4.0, 4.5 and 5.0 is vulnerable to a cross-site scripting vulnerability in the Active Content Filter used to filter EMail message content loaded from Microsoft Exchange. CVE(s): CVE-2015-1917 Affected product(s) and affected version(s): The following versions of IBM Connections are impacted: IBM Connections 5.0 IBM Connections 4.5 IBM Connections 4.0 Refer to the following reference URLs for remediation and additional vulnerability More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_connections_persistent_cross_site_scripting_xss_vulnerability_in_ibm_connections_mail_plug_in_cve_2015_1917?lang=en_us |
|