Unscored severity · published Jul 29, 2014
CVE-2014-3057
Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Websphere Portal · Ibm
7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more · source: NVD
WP
Websphere Portal Unified Task List Portlet · Ibm
6.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3057
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3057
secunia.com
http://secunia.com/advisories/60499
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21677032
www.securityfocus.com
http://www.securityfocus.com/bid/68928
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/93531
More from Websphere Portal
8.8
CVE-2017-1156
IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
8.8
CVE-2016-2901
Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers…
7.8
CVE-2013-2951
IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain…
7.5
CVE-2017-1577
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system
7.4
CVE-2015-7428
Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and…