CVE-2014-6214

IBM WebSphere Portal 8.0.0-8.0.0.1 CF15 and 8.5.0 < CF05 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21697213
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031880
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI34987

Scores

EPSS 0.0096
EPSS Percentile 57.2%

Details

CWE
CWE-352
Status published
Products (3)
ibm/websphere_portal 8.0.0.0
ibm/websphere_portal 8.0.0.1
ibm/websphere_portal 8.5.0.0
Published Mar 13, 2015
Tracked Since Feb 18, 2026