CVE-2014-4838
Last modified
CVE-2014-4838 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in GanttProjectSchedulerPopup.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.. EPSS estimates a 0.94% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in GanttProjectSchedulerPopup.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Tririga Application Platform | 3.2 |
| Ibm | Tririga Application Platform | 3.2.1 |
| Ibm | Tririga Application Platform | 3.3.0.0 |
| Ibm | Tririga Application Platform | 3.3.0.1 |
| Ibm | Tririga Application Platform | 3.3.1.0 |
| Ibm | Tririga Application Platform | 3.3.1.1 |
| Ibm | Tririga Application Platform | 3.3.1.2 |
| Ibm | Tririga Application Platform | 3.3.2.0 |
| Ibm | Tririga Application Platform | 3.3.2.1 |
| Ibm | Tririga Application Platform | 3.4.0.0 |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21686233Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21686233Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-4838?
How severe is CVE-2014-4838?
How do I fix CVE-2014-4838?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-4832IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before …
- CVE-2014-4833IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 all…
- CVE-2014-4834IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through …
- CVE-2014-4835IBM ServerGuide before 9.63, UpdateXpress System Packs Insta…
- CVE-2014-4836Cross-site scripting (XSS) vulnerability in breakOutWithName…
- CVE-2014-4837Cross-site scripting (XSS) vulnerability in NewDocument.jsp …
- CVE-2014-4839Cross-site request forgery (CSRF) vulnerability in birtviewe…
- CVE-2014-4840IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2,…
- CVE-2014-4843Curam Universal Access in IBM Curam Social Program Managemen…
- CVE-2014-4844The import/export functionality in IBM Business Process Mana…
- CVE-2014-4845Cross-site scripting (XSS) vulnerability in the BannerMan pl…
- CVE-2014-4846Cross-site scripting (XSS) vulnerability in the Meta Slider …
Are you affected by CVE-2014-4838?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST