Unscored severity · published Jun 7, 2015
CVE-2014-8887
IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated…
–
CVSS
1.1%
EPSS
No
On KEV
Description
IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Marketing Operations · Ibm
7.2.0.0; 7.2.0.4; 7.2.1.0; 7.2.1.12; 7.3.2.0; 7.3.2.1; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8887
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8887
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21902933
More from Marketing Operations
8.8
CVE-2016-6112
IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over…
8.1
CVE-2020-4125
Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the…
4.3
CVE-2017-1119
IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information
–
CVE-2014-6222
Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x…
–
CVE-2014-6175
Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and…