CVE-2014-6126: XSS
Published Oct 28, 2014
·Updated
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
1 affected component
IBM WebSphere Portal=8.5.0.0
Remediation
Patch Available
Event History
Oct 28, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6126?
CVE-2014-6126 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
2
How do I fix CVE-2014-6126?
To fix CVE-2014-6126, it is recommended to upgrade IBM WebSphere Portal to version 8.5.0 CF03 or later.
3
What systems are affected by CVE-2014-6126?
CVE-2014-6126 affects IBM WebSphere Portal version 8.5.0.0 and earlier versions.
4
What type of vulnerability is CVE-2014-6126?
CVE-2014-6126 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.
5
Can CVE-2014-6126 be exploited remotely?
Yes, CVE-2014-6126 can be exploited remotely by attackers to inject malicious scripts.