CVE-2014-6186

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:N/I:P/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV26309
http://www.ibm.com/support/docview.wss?uid=swg21693379Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693381Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693384Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693387Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98549
http://www-01.ibm.com/support/docview.wss?uid=swg1IV26309
http://www.ibm.com/support/docview.wss?uid=swg21693379Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693381Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693384Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693387Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98549

Timeline

Published: Dec 24, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-61876.0Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0 CVE-2014-61883.5Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x thro CVE-2014-61896.1Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.CVE-2014-61905.0The log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain sensitive information via a direct request for CVE-2014-61915.4Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject CVE-2014-61923.5Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 befo CVE-2014-61934.9IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticate CVE-2014-61944.0Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IF CVE-2014-61951.9The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX,CVE-2014-61964.3Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework CVE-2014-61974.3IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjack CVE-2014-61986.8Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the au