CVE-2014-4762

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-4762
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.0 before CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

3.5 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/61204
http://www-01.ibm.com/support/docview.wss?uid=swg1PI21973
http://www-01.ibm.com/support/docview.wss?uid=swg21681998 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94659
http://secunia.com/advisories/61204
http://www-01.ibm.com/support/docview.wss?uid=swg1PI21973
http://www-01.ibm.com/support/docview.wss?uid=swg21681998 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94659
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf03:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf04:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf05:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf04:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf05:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf06:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf07:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf08:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf09:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf12:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf01:*:*:*:*:*:*
History

21 Nov 2024, 02:10

Type Values Removed Values Added
References () http://secunia.com/advisories/61204 - () http://secunia.com/advisories/61204 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1PI21973 - () http://www-01.ibm.com/support/docview.wss?uid=swg1PI21973 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21681998 - Patch, Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg21681998 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/94659 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/94659 -
Information

Published : 2014-09-12 01:55

Updated : 2025-04-12 10:46

NVD link : CVE-2014-4762

Mitre link : CVE-2014-4762

CVE.ORG link : CVE-2014-4762

JSON object : View

Products Affected

ibm

  • websphere_portal
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')