Lucene search

K
nvd[email protected]NVD:CVE-2014-6193
HistoryDec 19, 2014 - 2:59 a.m.

CVE-2014-6193

2014-12-1902:59:03
web.nvd.nist.gov
3

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

43.6%

IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to pages via an XML injection attack.

Affected configurations

Nvd
Node
ibmwebsphere_portalMatch8.0.0.0
OR
ibmwebsphere_portalMatch8.0.0.1
OR
ibmwebsphere_portalMatch8.5.0.0
VendorProductVersionCPE
ibmwebsphere_portal8.0.0.0cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*
ibmwebsphere_portal8.0.0.1cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*
ibmwebsphere_portal8.5.0.0cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

43.6%

Related for NVD:CVE-2014-6193