CVE-2014-6174

Published Dec 18, 2014

Last updated 7 years ago

Overview

Description
IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote attackers to conduct clickjacking attacks via a crafted web site.
Source
psirt@us.ibm.com
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
4.3
Impact score
2.9
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-254

Social media

Hype score
Not currently trending

Configurations