CVE-2014-4762

Published: Sep 12, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.0 before CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected (18)

Products: Ibm: Websphere Portal

Ibm

1 product

Websphere Portal

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Portal	Version 8.0.0.0
Ibm Websphere Portal	Version 8.0.0.0 cf01
Ibm Websphere Portal	Version 8.0.0.0 cf02
Ibm Websphere Portal	Version 8.0.0.0 cf03
Ibm Websphere Portal	Version 8.0.0.0 cf04
Ibm Websphere Portal	Version 8.0.0.0 cf05
Ibm Websphere Portal	Version 8.0.0.1
Ibm Websphere Portal	Version 8.0.0.1
Ibm Websphere Portal	Version 8.0.0.1 cf04
Ibm Websphere Portal	Version 8.0.0.1 cf05
Ibm Websphere Portal	Version 8.0.0.1 cf06
Ibm Websphere Portal	Version 8.0.0.1 cf07
Ibm Websphere Portal	Version 8.0.0.1 cf08
Ibm Websphere Portal	Version 8.0.0.1 cf09
Ibm Websphere Portal	Version 8.0.0.1 cf12
Ibm Websphere Portal	Version 8.0
Ibm Websphere Portal	Version 8.5.0.0
Ibm Websphere Portal	Version 8.5.0.0 cf01