Vulnerability Bulletins |
Security Bulletin: Atlas Suite/Atlas Policy Suite Cross-site Scripting Vulnerabilities (CVE-2014-0889) |
|
| Affected software | IBM |
|
Multiple cross-site scripting (XSS) vulnerabilities exist due to insufficient input validation of URL parameters. CVE(s): CVE-2014-0889 Affected product(s) and affected version(s): IBM Atlas eDiscovery Process Management 6.0.1.6 and earlier, 6.0.2, 6.0.3 IBM Disposal and Governance Management for IT 6.0.1.6 and earlier, 6.0.2, 6.0.3 IBM Global Retention Policy and Schedule Management 6.0.1.6 and earlier, 6.0.2, 6.0.3 Refer to the following reference URLs for remediation and additional More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889?lang=en_us |
|