VULNERABILITY INTELLIGENCE

CVE-2014-6193

CVSS score4.9 MEDIUM
EPSS probability1.58%
CISA KEVNot currently listed
Published2014-12-19
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:P

Description

IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to pages via an XML injection attack.

Primary references