CVE-2014-4836

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

3.5LOW

EPSS

0.2%

top 59.41%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tririga Application Platform

Timeline

PublishedOct 19

Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in breakOutWithName.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/tririga_application_platform10 versions+9

🔴Vulnerability Details

GHSA

GHSA-gc65-x8gj-x2q8: Cross-site scripting (XSS) vulnerability in breakOutWithName↗2022-05-17

▶

CVEList

CVE-2014-4836: Cross-site scripting (XSS) vulnerability in breakOutWithName↗2014-10-19

▶