Lucene search

K
cve[email protected]CVE-2014-6188
HistoryDec 24, 2014 - 11:59 a.m.

CVE-2014-6188

2014-12-2411:59:10
CWE-79
web.nvd.nist.gov
19
ibm
wsrr
xss
vulnerabilities
web script
html
nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
ibmwebsphere_service_registry_and_repositoryMatch6.3.0
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.1
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.2
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.3
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.4
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.1
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.2
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.3
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.4
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.5
OR
ibmwebsphere_service_registry_and_repositoryMatch7.5.0.0
OR
ibmwebsphere_service_registry_and_repositoryMatch7.5.0.1
OR
ibmwebsphere_service_registry_and_repositoryMatch7.5.0.2
OR
ibmwebsphere_service_registry_and_repositoryMatch8.0
OR
ibmwebsphere_service_registry_and_repositoryMatch8.0.0.1

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

Related for CVE-2014-6188