CVE-2014-6193 XML external entity in n/a

What is CVE-2014-6193?

CVE-2014-6193 is a medium-severity vulnerability in Ibm Websphere Portal, published on 19 Dec 2014. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to pages via an XML injection attack.

Which versions are affected by CVE-2014-6193?

It affects 1 product.

Products include Ibm Websphere Portal.

How do I fix CVE-2014-6193?

No fix has been published for CVE-2014-6193 yet. Limit exposure of the affected software until one is available.

Is CVE-2014-6193 being exploited?

There is no known exploitation of CVE-2014-6193 in the wild and no public exploit code.

Other vulnerabilities in Ibm Websphere Portal

• CVE-2008-5675 Auth bypass in n/a Critical 10.0
• CVE-2017-1156 Open redirect in WebSphere Portal High 8.8
• CVE-2013-2951 Information disclosure in n/a High 7.8
• CVE-2015-7419 Denial of service in n/a High 7.8
• CVE-2015-1943 Denial of service in n/a High 7.8

All Ibm Websphere Portal vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-g5rj-38g2-m4v5.