CVE-2014-0901
IBM WebSphere Portal 8.0.0.x - Authenticated Cross-Site Scripting in Social Rendering
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the Social Rendering implementation in the IBM Connections integration in IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91398
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21667016
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/66559
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI12659
Scores
EPSS
0.0095
EPSS Percentile
57.5%
Details
CWE
CWE-79
Status
published
Products (2)
ibm/websphere_portal
8.0.0.0
ibm/websphere_portal
8.0.0.1
Published
Apr 02, 2014
Tracked Since
Feb 18, 2026