CVE-2014-6121 Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix....
LowCVSS 3.5
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security appscan | = 8.5 | No fix listed |
| ibm security appscan | = 8.6 | No fix listed |
| ibm security appscan | = 8.7 | No fix listed |
| ibm security appscan | = 8.8 | No fix listed |
| ibm security appscan | = 9.0 | No fix listed |
| ibm security appscan | = 9.0.0.1 | No fix listed |
| ibm security appscan source | = 9.0.1 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- 1031427 vdb-entry
- ibm-appscan-cve20146121-xss(96722) vdb-entry