CVE-2014-6160

no score yetEPSS 0.6%

IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-12-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:websphere_service_registry_and_repository

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV63498
http://www-01.ibm.com/support/docview.wss?uid=swg21693389
https://exchange.xforce.ibmcloud.com/vulnerabilities/97709
http://www-01.ibm.com/support/docview.wss?uid=swg1IV63498
http://www-01.ibm.com/support/docview.wss?uid=swg21693389

Check your stack JSON