CVE-2015-1888

published 2015-10-03

CVE-2015-1888: Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager…

low 3.5 CVSS 3.1

AV N AC M Au S C N I P A N

Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	content_navigator	—	—
ibm	content_navigator	—	—

CWE-79