CVE-2014-0823

Published: May 1, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL.

Products: Ibm: Websphere Application Server

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 8.5.0.0
Ibm Websphere Application Server	Version 8.5.0.1
Ibm Websphere Application Server	Version 8.5.0.2
Ibm Websphere Application Server	Version 8.5.5.0
Ibm Websphere Application Server	Version 8.5.5.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 7.0

Configuration C

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 8.0.0.0
Ibm Websphere Application Server	Version 8.0.0.1
Ibm Websphere Application Server	Version 8.0.0.2
Ibm Websphere Application Server	Version 8.0.0.3
Ibm Websphere Application Server	Version 8.0.0.4
Ibm Websphere Application Server	Version 8.0.0.5
Ibm Websphere Application Server	Version 8.0.0.6
Ibm Websphere Application Server	Version 8.0.0.7
Ibm Websphere Application Server	Version 8.0.0.8