Security Bulletin: Various security issues exist in WebSphere Service Registry and Repository version 8.0

Summary This bulletin describes a variety of minor security issues that have been found and fixed in WebSphere Service Registry and Repository version 8.0 Vulnerability Details CVE ID: CVE-2014-6153 DESCRIPTION: WSRR WEBUI ISSUES A COOKIE WHICH IS NOT DECLARED SSL ONLY. CVSS CVSS Base Score: 2.6...

CVE-2014-6178

CVE-2014-6178 affects IBM WebSphere Service Registry and Repository (WSRR) versions 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3. It is a cross-site scripting (XSS) vulnerability in the WSRR widgets that allows remote authenticated users to inject arbitrary web script or HTML via unspecified vec...