CVE-2014-0953: XSS

Published Aug 12, 2014

Updated

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, and 8.0.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected Software

15 affected components

IBM WebSphere Portal=6.1.0.0

IBM WebSphere Portal=6.1.0.1

IBM WebSphere Portal=6.1.0.2

IBM WebSphere Portal=6.1.0.3

IBM WebSphere Portal=6.1.0.4

IBM WebSphere Portal=6.1.0.5

IBM WebSphere Portal=6.1.0.6

IBM WebSphere Portal=6.1.5.0

IBM WebSphere Portal=6.1.5.1

IBM WebSphere Portal=6.1.5.2

IBM WebSphere Portal=6.1.5.3

IBM WebSphere Portal=7.0.0.0

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=8.0.0.0

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21680230

Event History

Aug 12, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-0953?

CVE-2014-0953 has a high severity level due to its potential for remote exploitation through cross-site scripting.

How do I fix CVE-2014-0953?

To fix CVE-2014-0953, it is recommended to upgrade to the latest version of IBM WebSphere Portal that has addressed this vulnerability.

Which versions of IBM WebSphere Portal are affected by CVE-2014-0953?

CVE-2014-0953 affects IBM WebSphere Portal versions from 6.1.0.0 through 6.1.0.6, 6.1.5.0 through 6.1.5.3, 7.0.0 through 7.0.0.2, and all versions before 8.0.0.1.

What type of attack is possible with CVE-2014-0953?

CVE-2014-0953 allows an attacker to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.

Is CVE-2014-0953 a critical vulnerability?

While CVE-2014-0953 is classified as high severity, its criticality depends on the specific context of its deployment and potential impact.