CVE-2014-0857

MEDIUM 4.0CVE-2014-0857 · Published 01/05/2014 · updated 17/06/2026

In short

CVE-2014-0857 is a MEDIUM (CVSS 4.0) vulnerability affecting websphere application server (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
websphere application server ibm	`= 7.0= 8.0.0.0= 8.0.0.1= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7= 8.0.0.8= 8.5.0.0= 8.5.0.1= 8.5.0.2= 8.5.5.0= 8.5.5.1`	No fix yet

Description

The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via a crafted request.

References

www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/67327
exchange.xforce.ibmcloud.com/vulnerabilities/90863

More vulnerabilities in websphere application server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

websphere application server

ibm

= 7.0= 8.0.0.0= 8.0.0.1= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7= 8.0.0.8= 8.5.0.0= 8.5.0.1= 8.5.0.2= 8.5.5.0= 8.5.5.1

No fix yet

More vulnerabilities in websphere application server

See all →