CVE-2014-4770 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2014-4770

Modified

More Info Official Page

Source-psirt@us.ibm.com

Published At-23 Sep, 2014 | 22:55

Updated At-06 May, 2026 | 22:30

Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

IBM Corporation

>>websphere_application_server>>6.0

cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.0.1

cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.0.2

cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.0.3

cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1

cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.1

cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.2

cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.3

cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.5

cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.7

cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.9

cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.11

cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.13

cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.15

cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.1.17

cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2

cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.1

cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.2

cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.3

cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.4

cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.5

cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.6

cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.7

cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.9

cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.11

cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.13

cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.15

cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.17

cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.19

cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.22

cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.23

cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.24

cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.25

cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.27

cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.28

cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.29

cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.30

cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.31

cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.32

cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.33

cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.35

cpe:2.3:a:ibm:websphere_application_server:6.0.2.35:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.37

cpe:2.3:a:ibm:websphere_application_server:6.0.2.37:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.39

cpe:2.3:a:ibm:websphere_application_server:6.0.2.39:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.41

cpe:2.3:a:ibm:websphere_application_server:6.0.2.41:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.0.2.43

cpe:2.3:a:ibm:websphere_application_server:6.0.2.43:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1

cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.1

cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.2

cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/61418	psirt@us.ibm.com	N/A
http://secunia.com/advisories/61423	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1PI23055	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21682767	psirt@us.ibm.com	Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/573356	psirt@us.ibm.com	US Government Resource
http://www.securityfocus.com/bid/69981	psirt@us.ibm.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/95209	psirt@us.ibm.com	N/A
http://secunia.com/advisories/61418	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/61423	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1PI23055	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21682767	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/573356	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.securityfocus.com/bid/69981	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/95209	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://secunia.com/advisories/61418

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/61423

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PI23055

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21682767

Source: psirt@us.ibm.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.kb.cert.org/vuls/id/573356

Source: psirt@us.ibm.com

Resource:

US Government Resource

Hyperlink: http://www.securityfocus.com/bid/69981

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95209

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/61418

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://secunia.com/advisories/61423

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PI23055

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21682767

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.kb.cert.org/vuls/id/573356

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.securityfocus.com/bid/69981

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95209

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A