← Back

CVE-2014-0951

nvd nist
Published: May 22, 2014Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in FilterForm.jsp in IBM WebSphere Portal 7.0 before 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (48)

1 product
Websphere Portal
Configuration A
48 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 6.1.0.6 cf27
Version 6.1.5.3 cf27
Version 7.0.0.0
Version 7.0.0.0 cf001
Version 7.0.0.1
Version 7.0.0.1 cf002
Version 7.0.0.1 cf003
Version 7.0.0.1 cf004
Version 7.0.0.1 cf005
Version 7.0.0.1 cf006
Version 7.0.0.1 cf007
Version 7.0.0.1 cf008
Version 7.0.0.1 cf009
Version 7.0.0.1 cf010
Version 7.0.0.1 cf019
Version 7.0.0.2
Version 7.0.0.2 cf011
Version 7.0.0.2 cf012
Version 7.0.0.2 cf013
Version 7.0.0.2 cf014
Version 7.0.0.2 cf015
Version 7.0.0.2 cf016
Version 7.0.0.2 cf017
Version 7.0.0.2 cf018
Version 7.0.0.2 cf019
Version 7.0.0.2 cf020
Version 7.0.0.2 cf021
Version 7.0.0.2 cf022
Version 7.0.0.2 cf23
Version 7.0.0.2 cf24
Version 7.0.0.2 cf25
Version 7.0.0.2 cf26
Version 7.0.0.2 cf27
Version 8.0.0.0
Version 8.0.0.0 cf01
Version 8.0.0.0 cf02
Version 8.0.0.0 cf03
Version 8.0.0.0 cf04
Version 8.0.0.0 cf05
Version 8.0.0.1
Version 8.0.0.1 cf04
Version 8.0.0.1 cf05
Version 8.0.0.1 cf07
Version 8.0.0.1 cf08
Version 8.0.0.1 cf09
Version 8.0.0.1 cf10
Version 8.0.0.1 cf11
Version 8.0.0.1 cf12

References (6)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.