4.3
CVSSv2

CVE-2014-8911

Published: 14/02/2015 Updated: 08/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 prior to 2.0.1.2 FP002 IF003 and 2.0.3 prior to 2.0.3.2 FP002 allows remote malicious users to inject arbitrary web script or HTML via the Accept-Language HTTP header.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm content navigator 2.0.1

ibm content navigator 2.0.3

ibm content navigator 2.0.0