CVE-2014-0910

IBM Websphere Portal - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, and 7.0.0 through 7.0.0.2 CF28 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Exploits (1)

exploitdb WORKING POC
by Filippo Roncari · textwebappsxml
https://www.exploit-db.com/exploits/36941

References (3)

Scores

EPSS 0.0144
EPSS Percentile 80.6%

Details

CWE
CWE-79
Status published
Products (15)
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
ibm/websphere_portal
... and 5 more
Published Jun 18, 2014
Tracked Since Feb 18, 2026