CVE-2015-1979 Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted inp...
LowCVSS 3.5
EPSS 0.76%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the (1) addressability or (2) comments component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm case manager | = 5.2.1 | No fix listed |
| ibm case manager | = 5.2.1.1 | No fix listed |
References
- www-01.ibm.com patch vendor-advisory
- 75538 vdb-entry