[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

252271

 
 

909

 
 

196835

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-6193Date: (C)2014-12-22   (M)2023-12-22


IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to pages via an XML injection attack.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.9
Exploit Score: 6.8
Impact Score: 4.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: NONE
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
PI28699
http://www-01.ibm.com/support/docview.wss?uid=swg21692107
ibm-wsportal-cve20146193-xml-injection(98567)

CPE    3
cpe:/a:ibm:websphere_portal:8.0.0.1
cpe:/a:ibm:websphere_portal:8.0.0.0
cpe:/a:ibm:websphere_portal:8.5.0.0

© SecPod Technologies