CVE-2014-0954 | BDVDB-2026-61714 Detail

Description#

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 does not validate JSP includes, which allows remote attackers to obtain sensitive information, bypass intended request-dispatcher access restrictions, or cause a denial of service (memory consumption) via a crafted URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21672572
https://exchange.xforce.ibmcloud.com/vulnerabilities/92627
http://www-01.ibm.com/support/docview.wss?uid=swg1PI15723

Exploit#

No public exploit known

History#

Version 12014-05-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.