CVE-2014-8917

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1.3 before IF11 and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/99303

http://www.securitytracker.com/id/1032376

http://www.securityfocus.com/bid/72903

http://www-01.ibm.com/support/docview.wss?uid=swg21696013

http://www-01.ibm.com/support/docview.wss?uid=swg21694693

http://secunia.com/advisories/62837

http://secunia.com/advisories/62590

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3