CVE-2014-6180

published 2014-12-24

CVE-2014-6180: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1…

low 3.5 CVSS 3.1

AV N AC M Au S C N I P A N

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—
ibm	websphere_service_registry_and_repository	—	—

CWE-79