CVE-2014-0889

概要

参考情報

• secunia.com/advisories/59681
• www-01.ibm.com/support/entdocview.wss
• ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/91241

atlas ediscovery process management のその他の脆弱性

• CVE-2017-1356高 8.8IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements,…
• CVE-2017-1355低 3.7IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if una…
• CVE-2017-1354中 5.4IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…
• CVE-2017-1353低 3.5IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting use…
• CVE-2013-6334中 6.4IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0…