Vulnerability Details : CVE-2014-6105
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Vulnerability category: Input validation
Products affected by CVE-2014-6105
- cpe:2.3:a:ibm:security_identity_manager:6.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_identity_manager:6.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_identity_manager:6.0.0.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-6105
0.74%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 68 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-6105
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2014-6105
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-6105
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
IBM notice: The page you requested cannot be displayed
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637
IBM notice: The page you requested cannot be displayed
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624
IBM notice: The page you requested cannot be displayed
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635
IBM notice: The page you requested cannot be displayed
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642
IBM notice: The page you requested cannot be displayed
-
http://www-01.ibm.com/support/docview.wss?uid=swg21689779
IBM Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager available (CVE-2014-6110, CVE-2014-6098, CVE-2014-6096, CVE-2014,6105, CVE-2014-6107, CVE-2014-6095)Vendor Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496
IBM notice: The page you requested cannot be displayed
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/96144
IBM Security Identity Manager clickjacking CVE-2014-6105 Vulnerability Report
Jump to