Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2014-0828

Cross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Published: Apr 2, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-0828
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ibm / websphere_portal 7.0.0.1 7.0.0.1.x
ibm / websphere_portal 8.0.0.1 8.0.0.1.x
ibm / websphere_portal 7.0.0.0 7.0.0.0.x
ibm / websphere_portal 8.0.0.0 8.0.0.0.x
ibm / websphere_portal 6.1.5.1 6.1.5.1.x
ibm / websphere_portal 6.1.5.0 6.1.5.0.x
ibm / websphere_portal 6.1.0.5 6.1.0.5.x
ibm / websphere_portal 6.1.5.3 6.1.5.3.x
ibm / websphere_portal 6.1.0.2 6.1.0.2.x
ibm / websphere_portal 6.1.5.2 6.1.5.2.x
ibm / websphere_portal 6.1.0.1 6.1.0.1.x
ibm / websphere_portal 6.1.0.4 6.1.0.4.x
ibm / websphere_portal 6.1.0.3 6.1.0.3.x
ibm / websphere_portal 6.1.0.0 6.1.0.0.x
ibm / websphere_portal 7.0.0.2 7.0.0.2.x
ibm / websphere_portal 6.1.0.6 6.1.0.6.x