Lucene search
HistoryJul 29, 2014 - 8:55 p.m.
CVE-2014-3057
cve-2014-3057
cross-site scripting
xss
ibm
websphere portal
security vulnerability
nvd
utl portlet
url injection
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.1%
Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected configurations
Node
ibmwebsphere_portalMatch7.0.0.0
ORibmwebsphere_portalMatch7.0.0.1cf003
ORibmwebsphere_portalMatch7.0.0.1cf004
ORibmwebsphere_portalMatch7.0.0.1cf005
ORibmwebsphere_portalMatch7.0.0.1cf006
ORibmwebsphere_portalMatch7.0.0.1cf007
ORibmwebsphere_portalMatch7.0.0.1cf008
ORibmwebsphere_portalMatch7.0.0.1cf009
ORibmwebsphere_portalMatch7.0.0.1cf010
ORibmwebsphere_portalMatch7.0.0.1cf019
ORibmwebsphere_portalMatch7.0.0.2
ORibmwebsphere_portalMatch7.0.0.2-
ORibmwebsphere_portalMatch7.0.0.2cf011
ORibmwebsphere_portalMatch7.0.0.2cf012
ORibmwebsphere_portalMatch7.0.0.2cf013
ORibmwebsphere_portalMatch7.0.0.2cf014
ORibmwebsphere_portalMatch7.0.0.2cf015
ORibmwebsphere_portalMatch7.0.0.2cf016
ORibmwebsphere_portalMatch7.0.0.2cf017
ORibmwebsphere_portalMatch7.0.0.2cf018
ORibmwebsphere_portalMatch7.0.0.2cf019
ORibmwebsphere_portalMatch7.0.0.2cf020
ORibmwebsphere_portalMatch7.0.0.2cf021
ORibmwebsphere_portalMatch7.0.0.2cf022
ORibmwebsphere_portalMatch7.0.0.2cf23
ORibmwebsphere_portalMatch7.0.0.2cf24
ORibmwebsphere_portalMatch7.0.0.2cf25
ORibmwebsphere_portalMatch7.0.0.2cf26
ORibmwebsphere_portalMatch7.0.0.2cf27
ORibmwebsphere_portalMatch8.0.0.0
ORibmwebsphere_portalMatch8.0.0.0cf01
ORibmwebsphere_portalMatch8.0.0.0cf02
ORibmwebsphere_portalMatch8.0.0.0cf03
ORibmwebsphere_portalMatch8.0.0.0cf04
ORibmwebsphere_portalMatch8.0.0.0cf05
ORibmwebsphere_portalMatch8.0.0.1
ORibmwebsphere_portalMatch8.0.0.1cf04
ORibmwebsphere_portalMatch8.0.0.1cf05
ORibmwebsphere_portalMatch8.0.0.1cf06
ORibmwebsphere_portalMatch8.0.0.1cf07
ORibmwebsphere_portalMatch8.0.0.1cf08
ORibmwebsphere_portalMatch8.0.0.1cf09
ORibmwebsphere_portalMatch8.0.0.1cf12
ORibmwebsphere_portal_unified_task_list_portletMatch6.0.1
Related
prion
prion
Cross site scripting
2014-07-29 20:55:00
cvelist
cvelist
CVE-2014-3057
2014-07-29 20:00:00
nvd
nvd
CVE-2014-3057
2014-07-29 20:55:08
nessus
nessus
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.1%
Related for CVE-2014-3057