CVEvulnerability
CVE-2014-6093
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-11-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, and 8.5.x before 8.5.0 CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected configurations
• ibm websphere portal (<= 7.0.0.2)
• ibm websphere portal (<= 8.0.0.1)
• ibm websphere portal (<= 8.5.0.0)
• ibm websphere portal 7.0.0.0
• ibm websphere portal 7.0.0.1
• ibm websphere portal 8.0.0.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/59752 secunia.com
- http://secunia.com/advisories/60912 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI24678 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21689849 Vendor Advisory
- http://www.securitytracker.com/id/1031359 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95921 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/59752 secunia.com
- http://secunia.com/advisories/60912 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI24678 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21689849 Vendor Advisory
- http://www.securitytracker.com/id/1031359 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95921 exchange.xforce.ibmcloud.com