CVE-2014-6179: XSS

Published Dec 24, 2014

Updated

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

6 affected components

IBM WebSphere Service Registry and Repository=7.5.0.0

IBM WebSphere Service Registry and Repository=7.5.0.1

IBM WebSphere Service Registry and Repository=7.5.0.2

IBM WebSphere Service Registry and Repository=7.5.0.3

IBM WebSphere Service Registry and Repository=8.0

IBM WebSphere Service Registry and Repository=8.0.0.1

Event History

Dec 24, 2014

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6179?

CVE-2014-6179 is classified as a high severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2014-6179?

To fix CVE-2014-6179, upgrade IBM WebSphere Service Registry and Repository to versions 7.5.0.4 or 8.0.0.2 or later.

What applications are affected by CVE-2014-6179?

CVE-2014-6179 affects IBM WebSphere Service Registry and Repository versions 7.5.x prior to 7.5.0.4 and 8.0.x prior to 8.0.0.2.

What types of attacks can CVE-2014-6179 enable?

CVE-2014-6179 can enable remote attackers to inject arbitrary web scripts or HTML into the Web UI.

Is CVE-2014-6179 exploitable remotely?

Yes, CVE-2014-6179 is a remotely exploitable vulnerability that can affect client users.