3.5
CVSSv2

CVE-2015-1888

Published: 03/10/2015 Updated: 05/10/2015
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 prior to 2.0.2-ICN-FP007 and 2.0.3 prior to 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm content navigator 2.0.3

ibm content navigator 2.0.2