CVE-2014-6215

Published: Dec 11, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected (15)

Products: Ibm: Websphere Portal

Ibm

1 product

Websphere Portal

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Portal	Version 6.1.0.1
Ibm Websphere Portal	Version 6.1.0.2
Ibm Websphere Portal	Version 6.1.0.3
Ibm Websphere Portal	Version 6.1.0.4
Ibm Websphere Portal	Version 6.1.0.5
Ibm Websphere Portal	Version 6.1.0.6
Ibm Websphere Portal	Version 6.1.0.6 cf27
Ibm Websphere Portal	Version 6.1.0
Ibm Websphere Portal	Version 7.0.0.1
Ibm Websphere Portal	Version 7.0.0.2
Ibm Websphere Portal	Version 7.0.0
Ibm Websphere Portal	Version 8.0.0.1
Ibm Websphere Portal	Version 8.0.0.1 14
Ibm Websphere Portal	Version 8.0.0
Ibm Websphere Portal	Version 8.5.0