Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2014-4762

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.0 before CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

  • Published: Sep 12, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-4762
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ibm / websphere_portal 8.5.0.0 8.5.0.0.x
ibm / websphere_portal 8.5.0.0-cf01 8.5.0.0-cf01.x
ibm / websphere_portal 8.0.0.1-cf08 8.0.0.1-cf08.x
ibm / websphere_portal 8.0.0.1 8.0.0.1.x
ibm / websphere_portal 8.0.0.0 8.0.0.0.x
ibm / websphere_portal 8.0.0.1-cf06 8.0.0.1-cf06.x
ibm / websphere_portal 8.0.0.0-cf04 8.0.0.0-cf04.x
ibm / websphere_portal 8.0.0.1-cf05 8.0.0.1-cf05.x
ibm / websphere_portal 8.0.0.1-cf04 8.0.0.1-cf04.x
ibm / websphere_portal 8.0.0.0-cf01 8.0.0.0-cf01.x
ibm / websphere_portal 8.0.0.0-cf02 8.0.0.0-cf02.x
ibm / websphere_portal 8.0.0.1-cf07 8.0.0.1-cf07.x
ibm / websphere_portal 8.0.0.0-cf05 8.0.0.0-cf05.x
ibm / websphere_portal 8.0.0.0-cf03 8.0.0.0-cf03.x
ibm / websphere_portal 8.0.0.1-cf09 8.0.0.1-cf09.x
ibm / websphere_portal 8.0 8.0.x
ibm / websphere_portal 8.0.0.1-cf12 8.0.0.1-cf12.x