Vulnerability Database

289,782

Total vulnerabilities in the database

CVE-2014-6214

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

  • Published: Mar 13, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-6214
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
ibm / websphere_portal 8.5.0.0 8.5.0.0.x
ibm / websphere_portal 8.0.0.1 8.0.0.1.x
ibm / websphere_portal 8.0.0.0 8.0.0.0.x