Unscored severity · published Jun 7, 2015
CVE-2014-6222
Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Marketing Operations · Ibm
7.2.0.0; 7.2.0.4; 7.2.1.0; 7.2.1.12; 7.3.2.0; 7.3.2.1; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6222
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6222
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21902933
More from Marketing Operations
8.8
CVE-2016-6112
IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over…
8.1
CVE-2020-4125
Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the…
4.3
CVE-2017-1119
IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information
–
CVE-2014-8887
IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated…
–
CVE-2014-6175
Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and…