IBM Operational Decision Manager CVE-2014-0945 Unspecified Cross Site Scripting Vulnerability

Bugtraq ID:	67226
Class:	Input Validation Error
CVE:	CVE-2014-0945
Remote:	Yes
Local:	No
Published:	Apr 30 2014 12:00AM
Updated:	Apr 30 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM WebSphere Operational Decision Management 7.5 IBM Operational Decision Manager 8.5 IBM Operational Decision Manager 8.0.1 IBM Operational Decision Manager 8.0 IBM Operational Decision Manager 7.5
Not Vulnerable:

IBM Operational Decision Manager CVE-2014-0945 Unspecified Cross Site Scripting Vulnerability

IBM Operational Decision Manager is prone to an unspecified cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

IBM Operational Decision Manager 7.5, 8.0, 8.0.1, and 8.5 are vulnerable.

IBM Operational Decision Manager CVE-2014-0945 Unspecified Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Operational Decision Manager CVE-2014-0945 Unspecified Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)
  
• Operational Decision Manager Homepage (IBM)
  
• IBM Operational Decision Manager : CVE-2014-0944, CVE-2014-0945, CVE-2014-0946 (IBM)