4.3
CVSSv2

CVE-2014-0917

Published: 16/05/2014 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 up to and including 6.1.0.6 CF27, 6.1.5 up to and including 6.1.5.3 CF27, 7.0 up to and including 7.0.0.2 CF27, and 8.0 prior to 8.0.0.1 CF06 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere portal 8.0.0.0

ibm websphere portal 7.0.0.1

ibm websphere portal 7.0.0.2

ibm websphere portal 6.1.5.2

ibm websphere portal 6.1.5.3

ibm websphere portal 8.0.0.1

ibm websphere portal 6.1.0.2

ibm websphere portal 6.1.0.3

ibm websphere portal 7.0.0.0

ibm websphere portal 6.1.5.0

ibm websphere portal 6.1.5.1

ibm websphere portal 6.1.0.4

ibm websphere portal 6.1.0.5

ibm websphere portal 6.1.0.6

ibm websphere portal 6.1.0.0

ibm websphere portal 6.1.0.1

Exploits

IBM Eclipse Help System (IEHS) versions 610 through 6106, 615 through 6153, 70 through 7002, and 80 prior to 8001 suffer from a cross site scripting vulnerability ...