CVEvulnerability
CVE-2014-3055
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
• ibm websphere portal 7.0.0.0
• ibm websphere portal 7.0.0.1
• ibm websphere portal 7.0.0.2
• ibm websphere portal 8.0.0.0
• ibm websphere portal 8.0.0.1
• ibm websphere portal unified task list portlet 6.0.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/60499 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21677032 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93529 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/60499 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21677032 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93529 exchange.xforce.ibmcloud.com