CVE-2014-8916: IBM Openpages Grc Platform

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0144.

Affected products

• IBM Openpages Grc Platform: version 6.2.0.0 only; version 6.2.1.0 only; version 6.2.1.1 only; version 7.0.0.0 only; version 7.1.0.0 only

Published 2015-10-03. Last modified 2026-06-17.