CVE-2014-6093

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-26 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, and 8.5.x before 8.5.0 CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected products

IBM WebSphere Portal: through 7.0.0.2; through 8.0.0.1; through 8.5.0.0; 7.0.0.0, 7.0.0.1, 8.0.0.0

References

http://secunia.com/advisories/59752
http://secunia.com/advisories/60912
http://www-01.ibm.com/support/docview.wss?uid=swg1PI24678
http://www-01.ibm.com/support/docview.wss?uid=swg21689849
http://www.securitytracker.com/id/1031359
https://exchange.xforce.ibmcloud.com/vulnerabilities/95921
http://secunia.com/advisories/59752
http://secunia.com/advisories/60912
http://www-01.ibm.com/support/docview.wss?uid=swg1PI24678
http://www-01.ibm.com/support/docview.wss?uid=swg21689849
http://www.securitytracker.com/id/1031359
https://exchange.xforce.ibmcloud.com/vulnerabilities/95921

Get alerted when CVE-2014-6093 or the next vulnerability affects your stack