CVE-2014-6178

published 2014-12-24

CVE-2014-6178: Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3…

low 3.5 CVSS 3.1

AV N AC M Au S C N I P A N

Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—

CWE-79