CVE-2014-6196

no score yetEPSS 1.4%

Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework (WDF) and Lotus Widget Factory (LWF), allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere Portal configuration, leading to improper construction of a response page by an application.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-11-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:web_experience_factory

References

http://secunia.com/advisories/59546
http://www-01.ibm.com/support/docview.wss?uid=swg1LO82672
http://www-01.ibm.com/support/docview.wss?uid=swg1LO82673
http://www-01.ibm.com/support/docview.wss?uid=swg1LO82674
http://www-01.ibm.com/support/docview.wss?uid=swg1LO82675

Check your stack JSON