Lucene search

[email protected]CVE-2014-0917

HistoryMay 16, 2014 - 11:12 a.m.

CVE-2014-0917

2014-05-1611:12:00

CWE-79

[email protected]

web.nvd.nist.gov

ibm

eclipse

help system

xss

vulnerability

websphere portal

cve-2014-0917

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

Cross-site scripting (XSS) vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

NVD

Node

ibmwebsphere_portalMatch6.1.0.0

ibmwebsphere_portalMatch6.1.0.1

ibmwebsphere_portalMatch6.1.0.2

ibmwebsphere_portalMatch6.1.0.3

ibmwebsphere_portalMatch6.1.0.4

ibmwebsphere_portalMatch6.1.0.5

ibmwebsphere_portalMatch6.1.0.6

ibmwebsphere_portalMatch6.1.5.0

ibmwebsphere_portalMatch6.1.5.1

ibmwebsphere_portalMatch6.1.5.2

ibmwebsphere_portalMatch6.1.5.3

ibmwebsphere_portalMatch7.0.0.0

ibmwebsphere_portalMatch7.0.0.0cf001

ibmwebsphere_portalMatch7.0.0.1

ibmwebsphere_portalMatch7.0.0.1cf002

ibmwebsphere_portalMatch7.0.0.1cf003

ibmwebsphere_portalMatch7.0.0.1cf004

ibmwebsphere_portalMatch7.0.0.1cf005

ibmwebsphere_portalMatch7.0.0.1cf006

ibmwebsphere_portalMatch7.0.0.1cf007

ibmwebsphere_portalMatch7.0.0.1cf008

ibmwebsphere_portalMatch7.0.0.1cf009

ibmwebsphere_portalMatch7.0.0.1cf010

ibmwebsphere_portalMatch7.0.0.1cf019

ibmwebsphere_portalMatch7.0.0.2

ibmwebsphere_portalMatch7.0.0.2cf011

ibmwebsphere_portalMatch7.0.0.2cf012

ibmwebsphere_portalMatch7.0.0.2cf013

ibmwebsphere_portalMatch7.0.0.2cf014

ibmwebsphere_portalMatch7.0.0.2cf015

ibmwebsphere_portalMatch7.0.0.2cf016

ibmwebsphere_portalMatch7.0.0.2cf017

ibmwebsphere_portalMatch7.0.0.2cf018

ibmwebsphere_portalMatch7.0.0.2cf019

ibmwebsphere_portalMatch7.0.0.2cf020

ibmwebsphere_portalMatch7.0.0.2cf021

ibmwebsphere_portalMatch7.0.0.2cf022

ibmwebsphere_portalMatch7.0.0.2cf23

ibmwebsphere_portalMatch7.0.0.2cf24

ibmwebsphere_portalMatch7.0.0.2cf25

ibmwebsphere_portalMatch7.0.0.2cf26

ibmwebsphere_portalMatch7.0.0.2cf27

ibmwebsphere_portalMatch8.0.0.0

ibmwebsphere_portalMatch8.0.0.0cf01

ibmwebsphere_portalMatch8.0.0.0cf02

ibmwebsphere_portalMatch8.0.0.0cf03

ibmwebsphere_portalMatch8.0.0.0cf04

ibmwebsphere_portalMatch8.0.0.0cf05

ibmwebsphere_portalMatch8.0.0.1

ibmwebsphere_portalMatch8.0.0.1cf04

ibmwebsphere_portalMatch8.0.0.1cf05

CPENameOperatorVersion
ibm:websphere_portalibm websphere portaleq6.1.0.0
ibm:websphere_portalibm websphere portaleq6.1.0.1
ibm:websphere_portalibm websphere portaleq6.1.0.2
ibm:websphere_portalibm websphere portaleq6.1.0.3
ibm:websphere_portalibm websphere portaleq6.1.0.4
ibm:websphere_portalibm websphere portaleq6.1.0.5
ibm:websphere_portalibm websphere portaleq6.1.0.6
ibm:websphere_portalibm websphere portaleq6.1.5.0
ibm:websphere_portalibm websphere portaleq6.1.5.1
ibm:websphere_portalibm websphere portaleq6.1.5.2

CPE	Name	Operator	Version
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.1
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.2
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.3
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.4
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.5
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.6
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.1
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.2