CVE Feed

    Dashboard / CVE / CVE-2014-0889

    CVE-2014-0889

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

    Published:Jul 29, 2014
    Last Modified:Apr 12, 2025
    EPS:Jul 29, 2014
    EPSS Score:0.00256
    CVSS Score:4.3

    Affected Products

    Vendor
    Ibm
    Product
    Atlas Ediscovery Process Management
    Vendor
    Ibm
    Product
    Atlas Suite
    Vendor
    Ibm
    Product
    Disposal And Governance Management For It
    Vendor
    Ibm
    Product
    Global Retention Policy And Schedule Management

    Exploits

    No exploit reference

    Related CVEs

    CVE-2017-1353 (CVSS 3.5) — IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive inform…
    CVE-2017-1355 (CVSS 3.7) — IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to…
    CVE-2017-1354 (CVSS 5.4) — IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows…
    CVE-2017-1356 (CVSS 8.8) — IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send spe…
    CVE-2013-6334 (CVSS 6.4) — IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for …
    CVE-2013-6321 (CVSS 7.5) — SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High