CVE-2014-4816

EPSS 0.14%
Published 23.09.2014 22:55:03
Last modified 12.04.2025 10:46:40
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected products Warnungen 0 Metrics 2 CWE 1 References 10

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server Version6.0

Ibm ≫ Websphere Application Server Version6.0.0.1

Ibm ≫ Websphere Application Server Version6.0.0.2

Ibm ≫ Websphere Application Server Version6.0.0.3

Ibm ≫ Websphere Application Server Version6.0.1

Ibm ≫ Websphere Application Server Version6.0.1.1

Ibm ≫ Websphere Application Server Version6.0.1.2

Ibm ≫ Websphere Application Server Version6.0.1.3

Ibm ≫ Websphere Application Server Version6.0.1.5

Ibm ≫ Websphere Application Server Version6.0.1.7

Ibm ≫ Websphere Application Server Version6.0.1.9

Ibm ≫ Websphere Application Server Version6.0.1.11

Ibm ≫ Websphere Application Server Version6.0.1.13

Ibm ≫ Websphere Application Server Version6.0.1.15

Ibm ≫ Websphere Application Server Version6.0.1.17

Ibm ≫ Websphere Application Server Version6.0.2

Ibm ≫ Websphere Application Server Version6.0.2.1

Ibm ≫ Websphere Application Server Version6.0.2.2

Ibm ≫ Websphere Application Server Version6.0.2.3

Ibm ≫ Websphere Application Server Version6.0.2.4

Ibm ≫ Websphere Application Server Version6.0.2.5

Ibm ≫ Websphere Application Server Version6.0.2.6

Ibm ≫ Websphere Application Server Version6.0.2.7

Ibm ≫ Websphere Application Server Version6.0.2.9

Ibm ≫ Websphere Application Server Version6.0.2.11

Ibm ≫ Websphere Application Server Version6.0.2.13

Ibm ≫ Websphere Application Server Version6.0.2.15

Ibm ≫ Websphere Application Server Version6.0.2.17

Ibm ≫ Websphere Application Server Version6.0.2.19

Ibm ≫ Websphere Application Server Version6.0.2.22

Ibm ≫ Websphere Application Server Version6.0.2.23

Ibm ≫ Websphere Application Server Version6.0.2.24

Ibm ≫ Websphere Application Server Version6.0.2.25

Ibm ≫ Websphere Application Server Version6.0.2.27

Ibm ≫ Websphere Application Server Version6.0.2.28

Ibm ≫ Websphere Application Server Version6.0.2.29

Ibm ≫ Websphere Application Server Version6.0.2.30

Ibm ≫ Websphere Application Server Version6.0.2.31

Ibm ≫ Websphere Application Server Version6.0.2.32

Ibm ≫ Websphere Application Server Version6.0.2.33

Ibm ≫ Websphere Application Server Version6.0.2.35

Ibm ≫ Websphere Application Server Version6.0.2.37

Ibm ≫ Websphere Application Server Version6.0.2.39

Ibm ≫ Websphere Application Server Version6.0.2.41

Ibm ≫ Websphere Application Server Version6.0.2.43

Ibm ≫ Websphere Application Server Version6.1

Ibm ≫ Websphere Application Server Version6.1.0

Ibm ≫ Websphere Application Server Version6.1.0.0

Ibm ≫ Websphere Application Server Version6.1.0.1

Ibm ≫ Websphere Application Server Version6.1.0.2

Ibm ≫ Websphere Application Server Version6.1.0.3

Ibm ≫ Websphere Application Server Version6.1.0.5

Ibm ≫ Websphere Application Server Version6.1.0.7

Ibm ≫ Websphere Application Server Version6.1.0.9

Ibm ≫ Websphere Application Server Version6.1.0.11

Ibm ≫ Websphere Application Server Version6.1.0.12

Ibm ≫ Websphere Application Server Version6.1.0.13

Ibm ≫ Websphere Application Server Version6.1.0.14

Ibm ≫ Websphere Application Server Version6.1.0.15

Ibm ≫ Websphere Application Server Version6.1.0.17

Ibm ≫ Websphere Application Server Version6.1.0.19

Ibm ≫ Websphere Application Server Version6.1.0.21

Ibm ≫ Websphere Application Server Version6.1.0.23

Ibm ≫ Websphere Application Server Version6.1.0.25

Ibm ≫ Websphere Application Server Version6.1.0.27

Ibm ≫ Websphere Application Server Version6.1.0.29

Ibm ≫ Websphere Application Server Version6.1.0.31

Ibm ≫ Websphere Application Server Version6.1.0.33

Ibm ≫ Websphere Application Server Version6.1.0.35

Ibm ≫ Websphere Application Server Version6.1.0.37

Ibm ≫ Websphere Application Server Version6.1.0.39

Ibm ≫ Websphere Application Server Version6.1.0.41

Ibm ≫ Websphere Application Server Version6.1.0.43

Ibm ≫ Websphere Application Server Version6.1.0.45

Ibm ≫ Websphere Application Server Version6.1.0.47

Ibm ≫ Websphere Application Server Version7.0

Ibm ≫ Websphere Application Server Version7.0.0.1

Ibm ≫ Websphere Application Server Version7.0.0.2

Ibm ≫ Websphere Application Server Version7.0.0.3

Ibm ≫ Websphere Application Server Version7.0.0.4

Ibm ≫ Websphere Application Server Version7.0.0.5

Ibm ≫ Websphere Application Server Version7.0.0.6

Ibm ≫ Websphere Application Server Version7.0.0.7

Ibm ≫ Websphere Application Server Version7.0.0.8

Ibm ≫ Websphere Application Server Version7.0.0.9

Ibm ≫ Websphere Application Server Version7.0.0.10

Ibm ≫ Websphere Application Server Version7.0.0.11

Ibm ≫ Websphere Application Server Version7.0.0.12

Ibm ≫ Websphere Application Server Version7.0.0.13

Ibm ≫ Websphere Application Server Version7.0.0.14

Ibm ≫ Websphere Application Server Version7.0.0.15

Ibm ≫ Websphere Application Server Version7.0.0.16

Ibm ≫ Websphere Application Server Version7.0.0.17

Ibm ≫ Websphere Application Server Version7.0.0.18

Ibm ≫ Websphere Application Server Version7.0.0.19

Ibm ≫ Websphere Application Server Version7.0.0.21

Ibm ≫ Websphere Application Server Version7.0.0.22

Ibm ≫ Websphere Application Server Version7.0.0.23

Ibm ≫ Websphere Application Server Version7.0.0.24

Ibm ≫ Websphere Application Server Version7.0.0.25

Ibm ≫ Websphere Application Server Version7.0.0.27

Ibm ≫ Websphere Application Server Version7.0.0.29

Ibm ≫ Websphere Application Server Version7.0.0.31

Ibm ≫ Websphere Application Server Version7.0.0.33

Ibm ≫ Websphere Application Server Version8.0.0.0

Ibm ≫ Websphere Application Server Version8.0.0.1

Ibm ≫ Websphere Application Server Version8.0.0.2

Ibm ≫ Websphere Application Server Version8.0.0.3

Ibm ≫ Websphere Application Server Version8.0.0.4

Ibm ≫ Websphere Application Server Version8.0.0.5

Ibm ≫ Websphere Application Server Version8.0.0.6

Ibm ≫ Websphere Application Server Version8.0.0.7

Ibm ≫ Websphere Application Server Version8.0.0.8

Ibm ≫ Websphere Application Server Version8.0.0.9

Ibm ≫ Websphere Application Server Version8.5.0.0

Ibm ≫ Websphere Application Server Version8.5.0.1

Ibm ≫ Websphere Application Server Version8.5.0.2

Ibm ≫ Websphere Application Server Version8.5.5.0

Ibm ≫ Websphere Application Server Version8.5.5.2

Ibm ≫ Websphere Application Server Version8.5.5.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.14%	0.346

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6	6.8	6.4	AV:N/AC:M/Au:S/C:P/I:P/A:P

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://secunia.com/advisories/61418

http://secunia.com/advisories/61423

http://www-01.ibm.com/support/docview.wss?uid=swg1PI23055

http://www-01.ibm.com/support/docview.wss?uid=swg21682767

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/573356

US Government Resource

http://www.securityfocus.com/bid/69980

https://exchange.xforce.ibmcloud.com/vulnerabilities/95402

https://nvd.nist.gov/vuln/detail/CVE-2014-4816

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4816

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4816

EUVD