Unscored CVE-2014-6163 EUVD-2014-6049GHSA-rvg5-rvr6-x6rv

Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated u…

Published Dec 11, 2014 · Updated Aug 6, 2024 · Assigned by ibm

Description

Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21691035
IT04614 vendor-advisory
ibm-xc10-cve20146163-xss(97712) vdb-entry