Vulnerability Database

316,422

Total vulnerabilities in the database

CVE-2014-6093

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, and 8.5.x before 8.5.0 CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Published: Nov 26, 2014
Updated: Nov 9, 2025
CVE: CVE-2014-6093
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
ibm / websphere_portal	7.0.0.1	7.0.0.1.x
ibm / websphere_portal	-	7.0.0.2.x
ibm / websphere_portal	7.0.0.0	7.0.0.0.x
ibm / websphere_portal	8.0.0.0	8.0.0.0.x
ibm / websphere_portal	-	8.0.0.1.x
ibm / websphere_portal	-	8.5.0.0.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo