CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-8917

Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1.3 before IF11 and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-8917

Ibm » Financial Transaction Manager » Version: 2.0.0.0

cpe:2.3:a:ibm:financial_transaction_manager:2.0.0.0
Ibm » Financial Transaction Manager » Version: 2.0.0.1

cpe:2.3:a:ibm:financial_transaction_manager:2.0.0.1
Ibm » Financial Transaction Manager » Version: 2.0.0.2

cpe:2.3:a:ibm:financial_transaction_manager:2.0.0.2
Ibm » Financial Transaction Manager » Version: 2.0.0.3

cpe:2.3:a:ibm:financial_transaction_manager:2.0.0.3
Ibm » Financial Transaction Manager » Version: 2.1.0.0

cpe:2.3:a:ibm:financial_transaction_manager:2.1.0.0
Ibm » Financial Transaction Manager » Version: 2.1.0.1

cpe:2.3:a:ibm:financial_transaction_manager:2.1.0.1
Ibm » Financial Transaction Manager » Version: 2.1.0.2

cpe:2.3:a:ibm:financial_transaction_manager:2.1.0.2
Ibm » Financial Transaction Manager » Version: 2.1.1.0

cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.0
Ibm » Financial Transaction Manager » Version: 2.1.1.1

cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.1
Ibm » Financial Transaction Manager » Version: 3.0.0.0

cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0
Ibm » Financial Transaction Manager For Check Services » Version: 2.1.1.8

cpe:2.3:a:ibm:financial_transaction_manager_for_check_services:2.1.1.8
Ibm » Financial Transaction Manager For Corporate Payment Services » Version: 2.1.1.0

cpe:2.3:a:ibm:financial_transaction_manager_for_corporate_payment_services:2.1.1.0
Ibm » Social Media Analytics » Version: 1.2.0.0

cpe:2.3:a:ibm:social_media_analytics:1.2.0.0
Ibm » Social Media Analytics » Version: 1.2.0.1

cpe:2.3:a:ibm:social_media_analytics:1.2.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-8917

Products

Pricing

Contact Us