IBM eDiscovery Manager Dojo Toolkit Cross-Site Scripting Vulnerabilities
Description
IBM has acknowledged multiple vulnerabilities in IBM eDiscovery Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.
For more information:
SA62590
The vulnerabilities are reported in versions 2.1, 2.1.1, 2.2, 2.2.1, and 2.2.2 running on AIX, Windows 2008 server, and Windows 2012 server.
Vulnerable Products
Vulnerable Software: IBM eDiscovery Manager 2.x
Solution
Apply fix (please see the vendor's advisory for details).
