Vulnerability Details CVE-2014-6180
Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 69.6%
CVSS Severity
CVSS v2 Score 3.5
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV01657
- http://www.ibm.com/support/docview.wss?uid=swg21693381
- http://www.ibm.com/support/docview.wss?uid=swg21693384
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98515
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV01657
- http://www.ibm.com/support/docview.wss?uid=swg21693381
- http://www.ibm.com/support/docview.wss?uid=swg21693384
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98515
Products affected by CVE-2014-6180
-
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0
-
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.1
-
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.2
-
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.3
-
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.4
-
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.5.0.0