cbcvebase.
CVE-2014-6186
published 2014-12-24

CVE-2014-6186: IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote…

PriorityP420medium4CVSS 2.0
AVNACLAuSCNIPAN
EPSS
1.80%
76.0th percentile
IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.

Affected

15 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
ibmwebsphere_service_registry_and_repository——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.