VULNERABILITY INTELLIGENCE

CVE-2014-0954

CVSS score6.8 NONE
EPSS probability1.31%
CISA KEVNot currently listed
Published2014-05-22
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 does not validate JSP includes, which allows remote attackers to obtain sensitive information, bypass intended request-dispatcher access restrictions, or cause a denial of service (memory consumption) via a crafted URL.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references