VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 15, 2014· Updated Jun 17, 2026

CVE-2014-4763

CVE-2014-4763

Description

Cross-site scripting (XSS) vulnerability in Content Navigator in Content Engine in IBM FileNet Content Manager 5.2.x before 5.2.0.3-P8CPE-IF003 and Content Foundation 5.2.x before 5.2.0.3-P8CPE-IF003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Content Foundation2 versions
    cpe:2.3:a:ibm:filenet_content_foundation:5.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:filenet_content_foundation:5.2.0:*:*:*:*:*:*:*
    • (no CPE)range: <=5.2.0.3-P8CPE-IF003
  • IBM/Filenet Content Manager2 versions
    cpe:2.3:a:ibm:filenet_content_manager:5.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:filenet_content_manager:5.2.0:*:*:*:*:*:*:*
    • (no CPE)range: <=5.2.0.3-P8CPE-IF003

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.