CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2014-6179
https://notcve.org/view.php?id=CVE-2014-6179
Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad XSS en la interfaz de usuario web en IBM WebSphere Service Registry y Repository (WSRR) 7.5.x anterior 7.5.0.4 y 8.0.x anterior a 8.0.0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores sin especificar. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV51859 http://www.ibm.com/support/docview.wss?uid=swg21693384 http://www.ibm.com/support/docview.wss?uid=swg21693387 https://exchange.xforce.ibmcloud.com/vulnerabilities/98516 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.0EPSS: 0%CPEs: 8EXPL: 0CVE-2014-6177
https://notcve.org/view.php?id=CVE-2014-6177
IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors. IBM WebSphere Service Registry y Repository (WSRR) 7.0.x anterior a 7.0.0.5 y 7.5.x anterior a 7.5.0.3 no realiza operaciones de control de acceso para recuperar operaciones de profundidad-0, lo cual permite a usuarios remotos autenticados obtener información sensible a través de vectores sin especificar. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV24386 http://www.ibm.com/support/docview.wss?uid=swg21693381 http://www.ibm.com/support/docview.wss?uid=swg21693384 https://exchange.xforce.ibmcloud.com/vulnerabilities/98492 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.0EPSS: 0%CPEs: 9EXPL: 0CVE-2014-6155
https://notcve.org/view.php?id=CVE-2014-6155
Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors. Vulnerabilidades múltiples de salto de directorio en IBM WebSphere Service Registry and Repository (WSRR) 7.5.x a través de 7.5.0.4, 8.0.x anterior a 8.0.0.3, y 8.5.x anterior a 8.5.0.1 permite a usuarios remotos autenticados leer ficheros arbitrarios a través de vectores sin especificar. • http://secunia.com/advisories/61805 http://www-01.ibm.com/support/docview.wss?uid=swg1IV63585 http://www.ibm.com/support/docview.wss?uid=swg21693384 http://www.ibm.com/support/docview.wss?uid=swg21693387 http://www.ibm.com/support/docview.wss?uid=swg21693389 https://exchange.xforce.ibmcloud.com/vulnerabilities/97678 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 3.5EPSS: 0%CPEs: 7EXPL: 0CVE-2014-6178
https://notcve.org/view.php?id=CVE-2014-6178
Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad XSS en los widgets de IBM WebSphere Service Registry y Repository (WSRR) 7.5.x anterior a 7.5.0.4 y 8.0.x anterior a 8.0.0.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores sin especificar. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV51765 http://www.ibm.com/support/docview.wss?uid=swg21693384 http://www.ibm.com/support/docview.wss?uid=swg21693387 https://exchange.xforce.ibmcloud.com/vulnerabilities/98514 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.0EPSS: 0%CPEs: 5EXPL: 0CVE-2014-6181
https://notcve.org/view.php?id=CVE-2014-6181
IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors. IBM WebSphere Service Registry y Repository (WSRR) 7.0.x anterior a 7.0.0.5 no realiza la comprobación de control de acceso a objetos contenidos, lo cual permite a usuarios remotos autenticados obtener información sensible a través de vectores sin especificar. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV25285 http://www.ibm.com/support/docview.wss?uid=swg21693381 https://exchange.xforce.ibmcloud.com/vulnerabilities/98517 • CWE-264: Permissions, Privileges, and Access Controls •