Unscored severity · published Jan 28, 2015
CVE-2014-8917
Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3)…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1.3 before IF11 and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FT
Financial Transaction Manager · Ibm
2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.1.0.0; 2.1.0.1; +4 more · source: NVD
FT
Financial Transaction Manager For Check Services · Ibm
2.1.1.8 · source: NVD
FT
Financial Transaction Manager For Corporate Payment Services · Ibm
2.1.1.0 · source: NVD
SM
Social Media Analytics · Ibm
through 1.3.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8917
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8917
secunia.com
http://secunia.com/advisories/62590
secunia.com
http://secunia.com/advisories/62837
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21694693
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21696013
www.securityfocus.com
http://www.securityfocus.com/bid/72903
www.securitytracker.com
http://www.securitytracker.com/id/1032376
More from Financial Transaction Manager
9.9
CVE-2026-18169
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-18163
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-18162
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-17618
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2019-4575
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection