CVE-2014-0883

CVE-2014-0883: IBM Power Hardware Management Console cross-site scripting

Vendor Ibm

Product Power HMC

Weakness CWE-79 · XSS

Published April 20, 2018

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 91163.

Key dates

02Disclosure timeline

April 20, 2018 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2014-0883 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

Identifiers

CVE CVE-2014-0883

CWE CWE-79

Affected versions

Vendor Ibm

Product Power HMC

Affected ≥ 7.1.0 and ≤ 7.8.0

Vendor Ibm

Product Power HMC

Affected 7.3.5

CVE-2014-0883: IBM Power Hardware Management Console cross-site scripting

01Description

02Disclosure timeline

03References

04Related CVE