CVE-2014-6180

Published: Dec 24, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header.

Affected (6)

Products: Ibm: Websphere Service Registry And Repository

Ibm

1 product

Websphere Service Registry And Repository

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Service Registry And Repository	Version 7.0.0.1
Ibm Websphere Service Registry And Repository	Version 7.0.0.2
Ibm Websphere Service Registry And Repository	Version 7.0.0.3
Ibm Websphere Service Registry And Repository	Version 7.0.0.4
Ibm Websphere Service Registry And Repository	Version 7.0.0
Ibm Websphere Service Registry And Repository	Version 7.5.0.0