← Back

CVE-2014-0918

nvd nist
Published: May 16, 2014Modified: May 6, 2026

JSON object

Loading...
7.1
Vector
AV:N/AC:M/Au:N/C:C/I:N/A:N
Exploitability: 8.6 / Impact: 6.9
Source: NVD

Description

Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL.

Affected (51)

1 product
Websphere Portal
Configuration A
51 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 6.1.0.0
Version 6.1.0.1
Version 6.1.0.2
Version 6.1.0.3
Version 6.1.0.4
Version 6.1.0.5
Version 6.1.0.6
Version 6.1.5.0
Version 6.1.5.1
Version 6.1.5.2
Version 6.1.5.3
Version 7.0.0.0
Version 7.0.0.0 cf001
Version 7.0.0.1
Version 7.0.0.1 cf002
Version 7.0.0.1 cf003
Version 7.0.0.1 cf004
Version 7.0.0.1 cf005
Version 7.0.0.1 cf006
Version 7.0.0.1 cf007
Version 7.0.0.1 cf008
Version 7.0.0.1 cf009
Version 7.0.0.1 cf010
Version 7.0.0.1 cf019
Version 7.0.0.2
Version 7.0.0.2 cf011
Version 7.0.0.2 cf012
Version 7.0.0.2 cf013
Version 7.0.0.2 cf014
Version 7.0.0.2 cf015
Version 7.0.0.2 cf016
Version 7.0.0.2 cf017
Version 7.0.0.2 cf018
Version 7.0.0.2 cf019
Version 7.0.0.2 cf020
Version 7.0.0.2 cf021
Version 7.0.0.2 cf022
Version 7.0.0.2 cf23
Version 7.0.0.2 cf24
Version 7.0.0.2 cf25
Version 7.0.0.2 cf26
Version 7.0.0.2 cf27
Version 8.0.0.0
Version 8.0.0.0 cf01
Version 8.0.0.0 cf02
Version 8.0.0.0 cf03
Version 8.0.0.0 cf04
Version 8.0.0.0 cf05
Version 8.0.0.1
Version 8.0.0.1 cf04
Version 8.0.0.1 cf05

References (8)

Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.