Lucene search
HistorySep 23, 2014 - 10:55 p.m.
CVE-2014-4770
ibm
websphere
application server
xss
vulnerability
nvd
cve-2014-4770
3.6 Low
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
44.1%
Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.
Related
prion
prion
Cross site scripting
2014-09-23 22:55:00
cert
cert
IBM WebSphere Application Server contains multiple vulnerabilities
2014-10-08 00:00:00
openvas
openvas
IBM Websphere Application Server Multiple Vulnerabilities-02 (Mar 2016)
2016-03-03 00:00:00
ibm
ibm
nessus
nessus
IBM WebSphere Application Server 7.0.0.x < 7.0.0.35 Multiple Vulnerabilities
2017-04-04 00:00:00
IBM WebSphere Application Server 8.0.0.x < 8.0.0.10 Multiple Vulnerabilities
2017-04-04 00:00:00
IBM WebSphere Application Server 8.5.5.x < 8.5.5.4 Multiple Vulnerabilities
2017-04-04 00:00:00
3.6 Low
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
44.1%
Related for CVE-2014-4770