VULNERABILITY INTELLIGENCE
CVE-2014-3021
CVSS score5 MEDIUM
EPSS probability2.23%
CISA KEVNot currently listed
Published2014-10-19
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 does not properly handle HTTP headers, which allows remote attackers to obtain sensitive cookie and authentication data via an unspecified HTTP method.
Weakness classification
- CWE-20: Improper Input Validation