CVE-2014-4792

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-09-12 · updated 2026-06-17
Weakness: CWE-399

Description

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote authenticated users to cause a denial of service (disk consumption) by uploading large files.

Affected products

IBM WebSphere Portal: 6.0.0.0, 6.0.0.1, 6.0.1.6, 6.1.0.0, 6.1.0.1, 6.1.0.2 (+60)

References

http://secunia.com/advisories/61204
http://www-01.ibm.com/support/docview.wss?uid=swg1PI23334
http://www-01.ibm.com/support/docview.wss?uid=swg21681998
https://exchange.xforce.ibmcloud.com/vulnerabilities/95204
http://secunia.com/advisories/61204
http://www-01.ibm.com/support/docview.wss?uid=swg1PI23334
http://www-01.ibm.com/support/docview.wss?uid=swg21681998
https://exchange.xforce.ibmcloud.com/vulnerabilities/95204

Get alerted when CVE-2014-4792 or the next vulnerability affects your stack