CVE-2014-6189

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-22 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-XGS-All-Models-Hotfix-FP0008 and 5.3 before 5.3.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

IBM Security Network Protection 3100 Firmware: 5.2, 5.3
IBM Security Network Protection 4100 Firmware: 5.2, 5.3
IBM Security Network Protection 5100 Firmware: 5.2, 5.3
IBM Security Network Protection 7100 Firmware: 5.2, 5.3

References

http://www-01.ibm.com/support/docview.wss?uid=swg21697248
http://www.securityfocus.com/bid/73940
http://www-01.ibm.com/support/docview.wss?uid=swg21697248
http://www.securityfocus.com/bid/73940

Get alerted when CVE-2014-6189 or the next vulnerability affects your stack