CVE-2014-0870: Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 thr...

Security readout for executives and security teams

CVE-2014-0870 is a set of cross-site scripting flaws in IBM Algorithmics Algo Credit Limits RICOS. If an affected web interface is reachable, an attacker could cause malicious script or HTML to run in a user's browser. The strongest business concern is misuse of trusted sessions in a financial risk application. Exposure is limited to organizations running IBM Algorithmics Algo Credit Limits with RICOS versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5. Risk rises if the RICOS web interface is reachable by untrusted users, partners, or the internet. Prioritize remediation for any exposed or business-critical ACLM/RICOS instance. The vulnerability affects a financial risk platform and was publicly disclosed, but the provided sources do not establish active exploitation or severity scoring. Mitigation focus: Upgrade affected ACLM/RICOS deployments to IBM 4.7.0.03 FP5 or later.; Review IBM support guidance before applying fixes in production.; Restrict RICOS web access to trusted networks and users..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.